diff --git a/latest/model/jsonld-annotations.ttl b/latest/model/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/latest/model/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/latest/model/schema.json b/latest/model/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/latest/model/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/latest/model/spdx-context.jsonld b/latest/model/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/latest/model/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/latest/model/spdx-model.hext b/latest/model/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/latest/model/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/latest/model/spdx-model.json-ld b/latest/model/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/latest/model/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/latest/model/spdx-model.jsonld b/latest/model/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/latest/model/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/latest/model/spdx-model.longturtle b/latest/model/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/latest/model/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/latest/model/spdx-model.n3 b/latest/model/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/latest/model/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/latest/model/spdx-model.nt b/latest/model/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/latest/model/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/latest/model/spdx-model.pretty-xml b/latest/model/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/latest/model/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/latest/model/spdx-model.trig b/latest/model/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/latest/model/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/latest/model/spdx-model.ttl b/latest/model/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/latest/model/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/latest/model/spdx-model.xml b/latest/model/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/latest/model/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/latest/rdf/jsonld-annotations.ttl b/latest/rdf/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/latest/rdf/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/latest/rdf/schema.json b/latest/rdf/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/latest/rdf/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/latest/rdf/spdx-context.jsonld b/latest/rdf/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/latest/rdf/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/latest/rdf/spdx-model.hext b/latest/rdf/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/latest/rdf/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/latest/rdf/spdx-model.json-ld b/latest/rdf/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/latest/rdf/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/latest/rdf/spdx-model.jsonld b/latest/rdf/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/latest/rdf/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/latest/rdf/spdx-model.longturtle b/latest/rdf/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/latest/rdf/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/latest/rdf/spdx-model.n3 b/latest/rdf/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/latest/rdf/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/latest/rdf/spdx-model.nt b/latest/rdf/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/latest/rdf/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/latest/rdf/spdx-model.pretty-xml b/latest/rdf/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/latest/rdf/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/latest/rdf/spdx-model.trig b/latest/rdf/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/latest/rdf/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/latest/rdf/spdx-model.ttl b/latest/rdf/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/latest/rdf/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/latest/rdf/spdx-model.xml b/latest/rdf/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/latest/rdf/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3-draft/model/jsonld-annotations.ttl b/v3-draft/model/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3-draft/model/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3-draft/model/schema.json b/v3-draft/model/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3-draft/model/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3-draft/model/spdx-context.jsonld b/v3-draft/model/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3-draft/model/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3-draft/model/spdx-model.hext b/v3-draft/model/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3-draft/model/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3-draft/model/spdx-model.json-ld b/v3-draft/model/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3-draft/model/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3-draft/model/spdx-model.jsonld b/v3-draft/model/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3-draft/model/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3-draft/model/spdx-model.longturtle b/v3-draft/model/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3-draft/model/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3-draft/model/spdx-model.n3 b/v3-draft/model/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3-draft/model/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3-draft/model/spdx-model.nt b/v3-draft/model/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3-draft/model/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3-draft/model/spdx-model.pretty-xml b/v3-draft/model/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3-draft/model/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3-draft/model/spdx-model.trig b/v3-draft/model/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3-draft/model/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3-draft/model/spdx-model.ttl b/v3-draft/model/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3-draft/model/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3-draft/model/spdx-model.xml b/v3-draft/model/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3-draft/model/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3-draft/rdf/jsonld-annotations.ttl b/v3-draft/rdf/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3-draft/rdf/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3-draft/rdf/schema.json b/v3-draft/rdf/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3-draft/rdf/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3-draft/rdf/spdx-context.jsonld b/v3-draft/rdf/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3-draft/rdf/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3-draft/rdf/spdx-model.hext b/v3-draft/rdf/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3-draft/rdf/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3-draft/rdf/spdx-model.json-ld b/v3-draft/rdf/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3-draft/rdf/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3-draft/rdf/spdx-model.jsonld b/v3-draft/rdf/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3-draft/rdf/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3-draft/rdf/spdx-model.longturtle b/v3-draft/rdf/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3-draft/rdf/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3-draft/rdf/spdx-model.n3 b/v3-draft/rdf/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3-draft/rdf/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3-draft/rdf/spdx-model.nt b/v3-draft/rdf/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3-draft/rdf/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3-draft/rdf/spdx-model.pretty-xml b/v3-draft/rdf/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3-draft/rdf/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3-draft/rdf/spdx-model.trig b/v3-draft/rdf/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3-draft/rdf/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3-draft/rdf/spdx-model.ttl b/v3-draft/rdf/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3-draft/rdf/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3-draft/rdf/spdx-model.xml b/v3-draft/rdf/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3-draft/rdf/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0-RC1/model/jsonld-annotations.ttl b/v3.0-RC1/model/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0-RC1/model/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0-RC1/model/schema.json b/v3.0-RC1/model/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0-RC1/model/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0-RC1/model/spdx-context.jsonld b/v3.0-RC1/model/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0-RC1/model/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0-RC1/model/spdx-model.hext b/v3.0-RC1/model/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0-RC1/model/spdx-model.json-ld b/v3.0-RC1/model/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC1/model/spdx-model.jsonld b/v3.0-RC1/model/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC1/model/spdx-model.longturtle b/v3.0-RC1/model/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0-RC1/model/spdx-model.n3 b/v3.0-RC1/model/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC1/model/spdx-model.nt b/v3.0-RC1/model/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0-RC1/model/spdx-model.pretty-xml b/v3.0-RC1/model/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0-RC1/model/spdx-model.trig b/v3.0-RC1/model/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0-RC1/model/spdx-model.ttl b/v3.0-RC1/model/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0-RC1/model/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC1/model/spdx-model.xml b/v3.0-RC1/model/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0-RC1/model/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0-RC1/rdf/jsonld-annotations.ttl b/v3.0-RC1/rdf/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0-RC1/rdf/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0-RC1/rdf/schema.json b/v3.0-RC1/rdf/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0-RC1/rdf/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0-RC1/rdf/spdx-context.jsonld b/v3.0-RC1/rdf/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0-RC1/rdf/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0-RC1/rdf/spdx-model.hext b/v3.0-RC1/rdf/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0-RC1/rdf/spdx-model.json-ld b/v3.0-RC1/rdf/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC1/rdf/spdx-model.jsonld b/v3.0-RC1/rdf/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC1/rdf/spdx-model.longturtle b/v3.0-RC1/rdf/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0-RC1/rdf/spdx-model.n3 b/v3.0-RC1/rdf/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC1/rdf/spdx-model.nt b/v3.0-RC1/rdf/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0-RC1/rdf/spdx-model.pretty-xml b/v3.0-RC1/rdf/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0-RC1/rdf/spdx-model.trig b/v3.0-RC1/rdf/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0-RC1/rdf/spdx-model.ttl b/v3.0-RC1/rdf/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC1/rdf/spdx-model.xml b/v3.0-RC1/rdf/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0-RC1/rdf/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0-RC2/model/jsonld-annotations.ttl b/v3.0-RC2/model/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0-RC2/model/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0-RC2/model/schema.json b/v3.0-RC2/model/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0-RC2/model/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0-RC2/model/spdx-context.jsonld b/v3.0-RC2/model/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0-RC2/model/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0-RC2/model/spdx-model.hext b/v3.0-RC2/model/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0-RC2/model/spdx-model.json-ld b/v3.0-RC2/model/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC2/model/spdx-model.jsonld b/v3.0-RC2/model/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC2/model/spdx-model.longturtle b/v3.0-RC2/model/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0-RC2/model/spdx-model.n3 b/v3.0-RC2/model/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC2/model/spdx-model.nt b/v3.0-RC2/model/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0-RC2/model/spdx-model.pretty-xml b/v3.0-RC2/model/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0-RC2/model/spdx-model.trig b/v3.0-RC2/model/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0-RC2/model/spdx-model.ttl b/v3.0-RC2/model/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0-RC2/model/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC2/model/spdx-model.xml b/v3.0-RC2/model/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0-RC2/model/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0-RC2/rdf/jsonld-annotations.ttl b/v3.0-RC2/rdf/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0-RC2/rdf/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0-RC2/rdf/schema.json b/v3.0-RC2/rdf/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0-RC2/rdf/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0-RC2/rdf/spdx-context.jsonld b/v3.0-RC2/rdf/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0-RC2/rdf/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0-RC2/rdf/spdx-model.hext b/v3.0-RC2/rdf/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0-RC2/rdf/spdx-model.json-ld b/v3.0-RC2/rdf/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC2/rdf/spdx-model.jsonld b/v3.0-RC2/rdf/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0-RC2/rdf/spdx-model.longturtle b/v3.0-RC2/rdf/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0-RC2/rdf/spdx-model.n3 b/v3.0-RC2/rdf/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC2/rdf/spdx-model.nt b/v3.0-RC2/rdf/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0-RC2/rdf/spdx-model.pretty-xml b/v3.0-RC2/rdf/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0-RC2/rdf/spdx-model.trig b/v3.0-RC2/rdf/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0-RC2/rdf/spdx-model.ttl b/v3.0-RC2/rdf/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0-RC2/rdf/spdx-model.xml b/v3.0-RC2/rdf/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0-RC2/rdf/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0.1-draft/model/jsonld-annotations.ttl b/v3.0.1-draft/model/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0.1-draft/model/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0.1-draft/model/schema.json b/v3.0.1-draft/model/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0.1-draft/model/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0.1-draft/model/spdx-context.jsonld b/v3.0.1-draft/model/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0.1-draft/model/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0.1-draft/model/spdx-model.hext b/v3.0.1-draft/model/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0.1-draft/model/spdx-model.json-ld b/v3.0.1-draft/model/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0.1-draft/model/spdx-model.jsonld b/v3.0.1-draft/model/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0.1-draft/model/spdx-model.longturtle b/v3.0.1-draft/model/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0.1-draft/model/spdx-model.n3 b/v3.0.1-draft/model/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0.1-draft/model/spdx-model.nt b/v3.0.1-draft/model/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0.1-draft/model/spdx-model.pretty-xml b/v3.0.1-draft/model/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0.1-draft/model/spdx-model.trig b/v3.0.1-draft/model/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0.1-draft/model/spdx-model.ttl b/v3.0.1-draft/model/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0.1-draft/model/spdx-model.xml b/v3.0.1-draft/model/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0.1-draft/model/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0.1-draft/rdf/jsonld-annotations.ttl b/v3.0.1-draft/rdf/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0.1-draft/rdf/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0.1-draft/rdf/schema.json b/v3.0.1-draft/rdf/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0.1-draft/rdf/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0.1-draft/rdf/spdx-context.jsonld b/v3.0.1-draft/rdf/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0.1-draft/rdf/spdx-model.hext b/v3.0.1-draft/rdf/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0.1-draft/rdf/spdx-model.json-ld b/v3.0.1-draft/rdf/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0.1-draft/rdf/spdx-model.jsonld b/v3.0.1-draft/rdf/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0.1-draft/rdf/spdx-model.longturtle b/v3.0.1-draft/rdf/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0.1-draft/rdf/spdx-model.n3 b/v3.0.1-draft/rdf/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0.1-draft/rdf/spdx-model.nt b/v3.0.1-draft/rdf/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0.1-draft/rdf/spdx-model.pretty-xml b/v3.0.1-draft/rdf/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0.1-draft/rdf/spdx-model.trig b/v3.0.1-draft/rdf/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0.1-draft/rdf/spdx-model.ttl b/v3.0.1-draft/rdf/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0.1-draft/rdf/spdx-model.xml b/v3.0.1-draft/rdf/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0.1-draft/rdf/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0/model/jsonld-annotations.ttl b/v3.0/model/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0/model/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0/model/schema.json b/v3.0/model/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0/model/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0/model/spdx-context.jsonld b/v3.0/model/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0/model/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0/model/spdx-model.hext b/v3.0/model/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0/model/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0/model/spdx-model.json-ld b/v3.0/model/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0/model/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0/model/spdx-model.jsonld b/v3.0/model/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0/model/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0/model/spdx-model.longturtle b/v3.0/model/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0/model/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0/model/spdx-model.n3 b/v3.0/model/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0/model/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0/model/spdx-model.nt b/v3.0/model/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0/model/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0/model/spdx-model.pretty-xml b/v3.0/model/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0/model/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0/model/spdx-model.trig b/v3.0/model/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0/model/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0/model/spdx-model.ttl b/v3.0/model/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0/model/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0/model/spdx-model.xml b/v3.0/model/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0/model/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --git a/v3.0/rdf/jsonld-annotations.ttl b/v3.0/rdf/jsonld-annotations.ttl new file mode 100644 index 0000000000..5e3297df3d --- /dev/null +++ b/v3.0/rdf/jsonld-annotations.ttl @@ -0,0 +1,10 @@ +@base . +@prefix sh-to-code: . + + ; + sh-to-code:idPropertyName "spdxId" + . + + ; + sh-to-code:isExtensible true + . diff --git a/v3.0/rdf/schema.json b/v3.0/rdf/schema.json new file mode 100644 index 0000000000..10ddd1a748 --- /dev/null +++ b/v3.0/rdf/schema.json @@ -0,0 +1,5985 @@ +{ + "$schema": "https://json-schema.org/draft/2020-12/schema", + "$comment": "This file was automatically generated by shacl2code. DO NOT MANUALLY MODIFY IT", + "type": "object", + + "properties": { + "@context": { + "const": "https://spdx.org/rdf/3.0.1/spdx-context.jsonld" + } + }, + "required": ["@context"], + + "oneOf": [ + { + "type": "object", + "properties": { + "@graph": { + "description": "Top level container for JSON-LD objects", + "type": "array", + "items": { + "type": "object", + "$ref": "#/$defs/AnyClass", + "unevaluatedProperties": false + } + } + }, + "required": ["@graph"] + }, + { "$ref": "#/$defs/AnyClass" } + ], + "unevaluatedProperties": false, + + "$defs": { + "http_spdxinvalidAbstractClass": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "http://spdx.invalid./AbstractClass" } + ] + } + } + }, + { "$ref": "#/$defs/http_spdxinvalidAbstractClass_props" } + ] + }, + "http_spdxinvalidAbstractClass_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "http_spdxinvalidAbstractClass_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_EnergyConsumption": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumption" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumption_props" } + ] + }, + "ai_EnergyConsumption_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumption" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumption_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_finetuningEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption" + } + } + ] + }, + "ai_inferenceEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption" + } + } + ] + }, + "ai_trainingEnergyConsumption": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_EnergyConsumption_ai_trainingEnergyConsumption" + } + } + ] + } + } + } + ] + }, + "prop_ai_EnergyConsumption_ai_finetuningEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_inferenceEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "prop_ai_EnergyConsumption_ai_trainingEnergyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumptionDescription_derived" + }, + "ai_EnergyConsumptionDescription": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyConsumptionDescription" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription_props" } + ] + }, + "ai_EnergyConsumptionDescription_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyConsumptionDescription_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "ai_energyQuantity": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyQuantity" + }, + "ai_energyUnit": { + "$ref": "#/$defs/prop_ai_EnergyConsumptionDescription_ai_energyUnit" + } + }, + "required": [ + "ai_energyQuantity", + "ai_energyUnit" + ] + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyQuantity": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_ai_EnergyConsumptionDescription_ai_energyUnit": { + "enum": [ + "kilowattHour", + "megajoule", + "other" + ] + }, + "ai_EnergyUnitType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_EnergyUnitType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_EnergyUnitType_props" } + ] + }, + "ai_EnergyUnitType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_EnergyUnitType" } + ] + }, + { "const": "spdx:AI/EnergyUnitType/kilowattHour" }, + { "const": "spdx:AI/EnergyUnitType/megajoule" }, + { "const": "spdx:AI/EnergyUnitType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_EnergyUnitType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ai_SafetyRiskAssessmentType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ai_SafetyRiskAssessmentType" } + ] + } + } + }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType_props" } + ] + }, + "ai_SafetyRiskAssessmentType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" } + ] + }, + { "const": "spdx:AI/SafetyRiskAssessmentType/high" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/low" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/medium" }, + { "const": "spdx:AI/SafetyRiskAssessmentType/serious" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_SafetyRiskAssessmentType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "AnnotationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "AnnotationType" } + ] + } + } + }, + { "$ref": "#/$defs/AnnotationType_props" } + ] + }, + "AnnotationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/AnnotationType" } + ] + }, + { "const": "spdx:Core/AnnotationType/other" }, + { "const": "spdx:Core/AnnotationType/review" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "AnnotationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "CreationInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "CreationInfo" } + ] + } + } + }, + { "$ref": "#/$defs/CreationInfo_props" } + ] + }, + "CreationInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/CreationInfo" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "CreationInfo_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_CreationInfo_comment" + }, + "created": { + "$ref": "#/$defs/prop_CreationInfo_created" + }, + "createdBy": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdBy" + } + } + ] + }, + "createdUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_CreationInfo_createdUsing" + } + } + ] + }, + "specVersion": { + "$ref": "#/$defs/prop_CreationInfo_specVersion" + } + }, + "required": [ + "created", + "createdBy", + "specVersion" + ] + } + ] + }, + "prop_CreationInfo_comment": { + "type": "string" + }, + "prop_CreationInfo_created": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_CreationInfo_createdBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_CreationInfo_createdUsing": { + "$ref": "#/$defs/Tool_derived" + }, + "prop_CreationInfo_specVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "DictionaryEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "DictionaryEntry" } + ] + } + } + }, + { "$ref": "#/$defs/DictionaryEntry_props" } + ] + }, + "DictionaryEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/DictionaryEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "DictionaryEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "key": { + "$ref": "#/$defs/prop_DictionaryEntry_key" + }, + "value": { + "$ref": "#/$defs/prop_DictionaryEntry_value" + } + }, + "required": [ + "key" + ] + } + ] + }, + "prop_DictionaryEntry_key": { + "type": "string" + }, + "prop_DictionaryEntry_value": { + "type": "string" + }, + "Element_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "const": "SpdxOrganization" }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "const": "NoAssertionElement" }, + { "const": "NoneElement" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Element_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_Element_comment" + }, + "creationInfo": { + "$ref": "#/$defs/prop_Element_creationInfo" + }, + "description": { + "$ref": "#/$defs/prop_Element_description" + }, + "extension": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_extension" + } + } + ] + }, + "externalIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalIdentifier" + } + } + ] + }, + "externalRef": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_externalRef" + } + } + ] + }, + "name": { + "$ref": "#/$defs/prop_Element_name" + }, + "summary": { + "$ref": "#/$defs/prop_Element_summary" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Element_verifiedUsing" + } + } + ] + } + }, + "required": [ + "creationInfo" + ] + } + ] + }, + "prop_Element_comment": { + "type": "string" + }, + "prop_Element_creationInfo": { + "$ref": "#/$defs/CreationInfo_derived" + }, + "prop_Element_description": { + "type": "string" + }, + "prop_Element_extension": { + "$ref": "#/$defs/extension_Extension_derived" + }, + "prop_Element_externalIdentifier": { + "$ref": "#/$defs/ExternalIdentifier_derived" + }, + "prop_Element_externalRef": { + "$ref": "#/$defs/ExternalRef_derived" + }, + "prop_Element_name": { + "type": "string" + }, + "prop_Element_summary": { + "type": "string" + }, + "prop_Element_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ElementCollection_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ElementCollection_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "element": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_element" + } + } + ] + }, + "profileConformance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_profileConformance" + } + } + ] + }, + "rootElement": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ElementCollection_rootElement" + } + } + ] + } + } + } + ] + }, + "prop_ElementCollection_element": { + "$ref": "#/$defs/Element_derived" + }, + "prop_ElementCollection_profileConformance": { + "enum": [ + "ai", + "build", + "core", + "dataset", + "expandedLicensing", + "extension", + "lite", + "security", + "simpleLicensing", + "software" + ] + }, + "prop_ElementCollection_rootElement": { + "$ref": "#/$defs/Element_derived" + }, + "ExternalIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifier_props" } + ] + }, + "ExternalIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalIdentifier_comment" + }, + "externalIdentifierType": { + "$ref": "#/$defs/prop_ExternalIdentifier_externalIdentifierType" + }, + "identifier": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifier" + }, + "identifierLocator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalIdentifier_identifierLocator" + } + } + ] + }, + "issuingAuthority": { + "$ref": "#/$defs/prop_ExternalIdentifier_issuingAuthority" + } + }, + "required": [ + "externalIdentifierType", + "identifier" + ] + } + ] + }, + "prop_ExternalIdentifier_comment": { + "type": "string" + }, + "prop_ExternalIdentifier_externalIdentifierType": { + "enum": [ + "cpe22", + "cpe23", + "cve", + "email", + "gitoid", + "other", + "packageUrl", + "securityOther", + "swhid", + "swid", + "urlScheme" + ] + }, + "prop_ExternalIdentifier_identifier": { + "type": "string" + }, + "prop_ExternalIdentifier_identifierLocator": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalIdentifier_issuingAuthority": { + "type": "string" + }, + "ExternalIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalIdentifierType_props" } + ] + }, + "ExternalIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalIdentifierType" } + ] + }, + { "const": "spdx:Core/ExternalIdentifierType/cpe22" }, + { "const": "spdx:Core/ExternalIdentifierType/cpe23" }, + { "const": "spdx:Core/ExternalIdentifierType/cve" }, + { "const": "spdx:Core/ExternalIdentifierType/email" }, + { "const": "spdx:Core/ExternalIdentifierType/gitoid" }, + { "const": "spdx:Core/ExternalIdentifierType/other" }, + { "const": "spdx:Core/ExternalIdentifierType/packageUrl" }, + { "const": "spdx:Core/ExternalIdentifierType/securityOther" }, + { "const": "spdx:Core/ExternalIdentifierType/swhid" }, + { "const": "spdx:Core/ExternalIdentifierType/swid" }, + { "const": "spdx:Core/ExternalIdentifierType/urlScheme" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ExternalMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalMap" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalMap_props" } + ] + }, + "ExternalMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "definingArtifact": { + "$ref": "#/$defs/prop_ExternalMap_definingArtifact" + }, + "externalSpdxId": { + "$ref": "#/$defs/prop_ExternalMap_externalSpdxId" + }, + "locationHint": { + "$ref": "#/$defs/prop_ExternalMap_locationHint" + }, + "verifiedUsing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalMap_verifiedUsing" + } + } + ] + } + }, + "required": [ + "externalSpdxId" + ] + } + ] + }, + "prop_ExternalMap_definingArtifact": { + "$ref": "#/$defs/Artifact_derived" + }, + "prop_ExternalMap_externalSpdxId": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_locationHint": { + "$ref": "#/$defs/anyURI" + }, + "prop_ExternalMap_verifiedUsing": { + "$ref": "#/$defs/IntegrityMethod_derived" + }, + "ExternalRef": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "ExternalRef" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRef_props" } + ] + }, + "ExternalRef_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRef" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRef_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_ExternalRef_comment" + }, + "contentType": { + "$ref": "#/$defs/prop_ExternalRef_contentType" + }, + "externalRefType": { + "$ref": "#/$defs/prop_ExternalRef_externalRefType" + }, + "locator": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ExternalRef_locator" + } + } + ] + } + } + } + ] + }, + "prop_ExternalRef_comment": { + "type": "string" + }, + "prop_ExternalRef_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_ExternalRef_externalRefType": { + "enum": [ + "altDownloadLocation", + "altWebPage", + "binaryArtifact", + "bower", + "buildMeta", + "buildSystem", + "certificationReport", + "chat", + "componentAnalysisReport", + "cwe", + "documentation", + "dynamicAnalysisReport", + "eolNotice", + "exportControlAssessment", + "funding", + "issueTracker", + "license", + "mailingList", + "mavenCentral", + "metrics", + "npm", + "nuget", + "other", + "privacyAssessment", + "productMetadata", + "purchaseOrder", + "qualityAssessmentReport", + "releaseHistory", + "releaseNotes", + "riskAssessment", + "runtimeAnalysisReport", + "secureSoftwareAttestation", + "securityAdversaryModel", + "securityAdvisory", + "securityFix", + "securityOther", + "securityPenTestReport", + "securityPolicy", + "securityThreatModel", + "socialMedia", + "sourceArtifact", + "staticAnalysisReport", + "support", + "vcs", + "vulnerabilityDisclosureReport", + "vulnerabilityExploitabilityAssessment" + ] + }, + "prop_ExternalRef_locator": { + "type": "string" + }, + "ExternalRefType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ExternalRefType" } + ] + } + } + }, + { "$ref": "#/$defs/ExternalRefType_props" } + ] + }, + "ExternalRefType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ExternalRefType" } + ] + }, + { "const": "spdx:Core/ExternalRefType/altDownloadLocation" }, + { "const": "spdx:Core/ExternalRefType/altWebPage" }, + { "const": "spdx:Core/ExternalRefType/binaryArtifact" }, + { "const": "spdx:Core/ExternalRefType/bower" }, + { "const": "spdx:Core/ExternalRefType/buildMeta" }, + { "const": "spdx:Core/ExternalRefType/buildSystem" }, + { "const": "spdx:Core/ExternalRefType/certificationReport" }, + { "const": "spdx:Core/ExternalRefType/chat" }, + { "const": "spdx:Core/ExternalRefType/componentAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/cwe" }, + { "const": "spdx:Core/ExternalRefType/documentation" }, + { "const": "spdx:Core/ExternalRefType/dynamicAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/eolNotice" }, + { "const": "spdx:Core/ExternalRefType/exportControlAssessment" }, + { "const": "spdx:Core/ExternalRefType/funding" }, + { "const": "spdx:Core/ExternalRefType/issueTracker" }, + { "const": "spdx:Core/ExternalRefType/license" }, + { "const": "spdx:Core/ExternalRefType/mailingList" }, + { "const": "spdx:Core/ExternalRefType/mavenCentral" }, + { "const": "spdx:Core/ExternalRefType/metrics" }, + { "const": "spdx:Core/ExternalRefType/npm" }, + { "const": "spdx:Core/ExternalRefType/nuget" }, + { "const": "spdx:Core/ExternalRefType/other" }, + { "const": "spdx:Core/ExternalRefType/privacyAssessment" }, + { "const": "spdx:Core/ExternalRefType/productMetadata" }, + { "const": "spdx:Core/ExternalRefType/purchaseOrder" }, + { "const": "spdx:Core/ExternalRefType/qualityAssessmentReport" }, + { "const": "spdx:Core/ExternalRefType/releaseHistory" }, + { "const": "spdx:Core/ExternalRefType/releaseNotes" }, + { "const": "spdx:Core/ExternalRefType/riskAssessment" }, + { "const": "spdx:Core/ExternalRefType/runtimeAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/secureSoftwareAttestation" }, + { "const": "spdx:Core/ExternalRefType/securityAdversaryModel" }, + { "const": "spdx:Core/ExternalRefType/securityAdvisory" }, + { "const": "spdx:Core/ExternalRefType/securityFix" }, + { "const": "spdx:Core/ExternalRefType/securityOther" }, + { "const": "spdx:Core/ExternalRefType/securityPenTestReport" }, + { "const": "spdx:Core/ExternalRefType/securityPolicy" }, + { "const": "spdx:Core/ExternalRefType/securityThreatModel" }, + { "const": "spdx:Core/ExternalRefType/socialMedia" }, + { "const": "spdx:Core/ExternalRefType/sourceArtifact" }, + { "const": "spdx:Core/ExternalRefType/staticAnalysisReport" }, + { "const": "spdx:Core/ExternalRefType/support" }, + { "const": "spdx:Core/ExternalRefType/vcs" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityDisclosureReport" }, + { "const": "spdx:Core/ExternalRefType/vulnerabilityExploitabilityAssessment" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ExternalRefType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "HashAlgorithm": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "HashAlgorithm" } + ] + } + } + }, + { "$ref": "#/$defs/HashAlgorithm_props" } + ] + }, + "HashAlgorithm_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/HashAlgorithm" } + ] + }, + { "const": "spdx:Core/HashAlgorithm/adler32" }, + { "const": "spdx:Core/HashAlgorithm/blake2b256" }, + { "const": "spdx:Core/HashAlgorithm/blake2b384" }, + { "const": "spdx:Core/HashAlgorithm/blake2b512" }, + { "const": "spdx:Core/HashAlgorithm/blake3" }, + { "const": "spdx:Core/HashAlgorithm/crystalsDilithium" }, + { "const": "spdx:Core/HashAlgorithm/crystalsKyber" }, + { "const": "spdx:Core/HashAlgorithm/falcon" }, + { "const": "spdx:Core/HashAlgorithm/md2" }, + { "const": "spdx:Core/HashAlgorithm/md4" }, + { "const": "spdx:Core/HashAlgorithm/md5" }, + { "const": "spdx:Core/HashAlgorithm/md6" }, + { "const": "spdx:Core/HashAlgorithm/other" }, + { "const": "spdx:Core/HashAlgorithm/sha1" }, + { "const": "spdx:Core/HashAlgorithm/sha224" }, + { "const": "spdx:Core/HashAlgorithm/sha256" }, + { "const": "spdx:Core/HashAlgorithm/sha384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_224" }, + { "const": "spdx:Core/HashAlgorithm/sha3_256" }, + { "const": "spdx:Core/HashAlgorithm/sha3_384" }, + { "const": "spdx:Core/HashAlgorithm/sha3_512" }, + { "const": "spdx:Core/HashAlgorithm/sha512" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "HashAlgorithm_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "IntegrityMethod_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "IntegrityMethod_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "comment": { + "$ref": "#/$defs/prop_IntegrityMethod_comment" + } + } + } + ] + }, + "prop_IntegrityMethod_comment": { + "type": "string" + }, + "LifecycleScopeType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopeType" } + ] + } + } + }, + { "$ref": "#/$defs/LifecycleScopeType_props" } + ] + }, + "LifecycleScopeType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopeType" } + ] + }, + { "const": "spdx:Core/LifecycleScopeType/build" }, + { "const": "spdx:Core/LifecycleScopeType/design" }, + { "const": "spdx:Core/LifecycleScopeType/development" }, + { "const": "spdx:Core/LifecycleScopeType/other" }, + { "const": "spdx:Core/LifecycleScopeType/runtime" }, + { "const": "spdx:Core/LifecycleScopeType/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopeType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "NamespaceMap": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "NamespaceMap" } + ] + } + } + }, + { "$ref": "#/$defs/NamespaceMap_props" } + ] + }, + "NamespaceMap_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/NamespaceMap" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "NamespaceMap_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "namespace": { + "$ref": "#/$defs/prop_NamespaceMap_namespace" + }, + "prefix": { + "$ref": "#/$defs/prop_NamespaceMap_prefix" + } + }, + "required": [ + "namespace", + "prefix" + ] + } + ] + }, + "prop_NamespaceMap_namespace": { + "$ref": "#/$defs/anyURI" + }, + "prop_NamespaceMap_prefix": { + "type": "string" + }, + "PackageVerificationCode": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PackageVerificationCode" } + ] + } + } + }, + { "$ref": "#/$defs/PackageVerificationCode_props" } + ] + }, + "PackageVerificationCode_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PackageVerificationCode" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PackageVerificationCode_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_PackageVerificationCode_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_PackageVerificationCode_hashValue" + }, + "packageVerificationCodeExcludedFile": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_PackageVerificationCode_packageVerificationCodeExcludedFile" + } + } + ] + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_PackageVerificationCode_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_PackageVerificationCode_hashValue": { + "type": "string" + }, + "prop_PackageVerificationCode_packageVerificationCodeExcludedFile": { + "type": "string" + }, + "PositiveIntegerRange": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "PositiveIntegerRange" } + ] + } + } + }, + { "$ref": "#/$defs/PositiveIntegerRange_props" } + ] + }, + "PositiveIntegerRange_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PositiveIntegerRange" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PositiveIntegerRange_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "beginIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_beginIntegerRange" + }, + "endIntegerRange": { + "$ref": "#/$defs/prop_PositiveIntegerRange_endIntegerRange" + } + }, + "required": [ + "beginIntegerRange", + "endIntegerRange" + ] + } + ] + }, + "prop_PositiveIntegerRange_beginIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "prop_PositiveIntegerRange_endIntegerRange": { + "type": "integer", + "minimum": 1 + }, + "PresenceType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "PresenceType" } + ] + } + } + }, + { "$ref": "#/$defs/PresenceType_props" } + ] + }, + "PresenceType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/PresenceType" } + ] + }, + { "const": "spdx:Core/PresenceType/no" }, + { "const": "spdx:Core/PresenceType/noAssertion" }, + { "const": "spdx:Core/PresenceType/yes" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "PresenceType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "ProfileIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "ProfileIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/ProfileIdentifierType_props" } + ] + }, + "ProfileIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ProfileIdentifierType" } + ] + }, + { "const": "spdx:Core/ProfileIdentifierType/ai" }, + { "const": "spdx:Core/ProfileIdentifierType/build" }, + { "const": "spdx:Core/ProfileIdentifierType/core" }, + { "const": "spdx:Core/ProfileIdentifierType/dataset" }, + { "const": "spdx:Core/ProfileIdentifierType/expandedLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/extension" }, + { "const": "spdx:Core/ProfileIdentifierType/lite" }, + { "const": "spdx:Core/ProfileIdentifierType/security" }, + { "const": "spdx:Core/ProfileIdentifierType/simpleLicensing" }, + { "const": "spdx:Core/ProfileIdentifierType/software" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ProfileIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Relationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Relationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Relationship_props" } + ] + }, + "Relationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/Relationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Relationship_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "completeness": { + "$ref": "#/$defs/prop_Relationship_completeness" + }, + "endTime": { + "$ref": "#/$defs/prop_Relationship_endTime" + }, + "from": { + "$ref": "#/$defs/prop_Relationship_from_" + }, + "relationshipType": { + "$ref": "#/$defs/prop_Relationship_relationshipType" + }, + "startTime": { + "$ref": "#/$defs/prop_Relationship_startTime" + }, + "to": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_Relationship_to" + } + } + ] + } + }, + "required": [ + "from", + "relationshipType", + "to" + ] + } + ] + }, + "prop_Relationship_completeness": { + "enum": [ + "complete", + "incomplete", + "noAssertion" + ] + }, + "prop_Relationship_endTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_from_": { + "$ref": "#/$defs/Element_derived" + }, + "prop_Relationship_relationshipType": { + "enum": [ + "affects", + "amendedBy", + "ancestorOf", + "availableFrom", + "configures", + "contains", + "coordinatedBy", + "copiedTo", + "delegatedTo", + "dependsOn", + "descendantOf", + "describes", + "doesNotAffect", + "expandsTo", + "exploitCreatedBy", + "fixedBy", + "fixedIn", + "foundBy", + "generates", + "hasAddedFile", + "hasAssessmentFor", + "hasAssociatedVulnerability", + "hasConcludedLicense", + "hasDataFile", + "hasDeclaredLicense", + "hasDeletedFile", + "hasDependencyManifest", + "hasDistributionArtifact", + "hasDocumentation", + "hasDynamicLink", + "hasEvidence", + "hasExample", + "hasHost", + "hasInput", + "hasMetadata", + "hasOptionalComponent", + "hasOptionalDependency", + "hasOutput", + "hasPrerequisite", + "hasProvidedDependency", + "hasRequirement", + "hasSpecification", + "hasStaticLink", + "hasTest", + "hasTestCase", + "hasVariant", + "invokedBy", + "modifiedBy", + "other", + "packagedBy", + "patchedBy", + "publishedBy", + "reportedBy", + "republishedBy", + "serializedInArtifact", + "testedOn", + "trainedOn", + "underInvestigationFor", + "usesTool" + ] + }, + "prop_Relationship_startTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Relationship_to": { + "$ref": "#/$defs/Element_derived" + }, + "RelationshipCompleteness": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipCompleteness" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipCompleteness_props" } + ] + }, + "RelationshipCompleteness_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipCompleteness" } + ] + }, + { "const": "spdx:Core/RelationshipCompleteness/complete" }, + { "const": "spdx:Core/RelationshipCompleteness/incomplete" }, + { "const": "spdx:Core/RelationshipCompleteness/noAssertion" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipCompleteness_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "RelationshipType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "RelationshipType" } + ] + } + } + }, + { "$ref": "#/$defs/RelationshipType_props" } + ] + }, + "RelationshipType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/RelationshipType" } + ] + }, + { "const": "spdx:Core/RelationshipType/affects" }, + { "const": "spdx:Core/RelationshipType/amendedBy" }, + { "const": "spdx:Core/RelationshipType/ancestorOf" }, + { "const": "spdx:Core/RelationshipType/availableFrom" }, + { "const": "spdx:Core/RelationshipType/configures" }, + { "const": "spdx:Core/RelationshipType/contains" }, + { "const": "spdx:Core/RelationshipType/coordinatedBy" }, + { "const": "spdx:Core/RelationshipType/copiedTo" }, + { "const": "spdx:Core/RelationshipType/delegatedTo" }, + { "const": "spdx:Core/RelationshipType/dependsOn" }, + { "const": "spdx:Core/RelationshipType/descendantOf" }, + { "const": "spdx:Core/RelationshipType/describes" }, + { "const": "spdx:Core/RelationshipType/doesNotAffect" }, + { "const": "spdx:Core/RelationshipType/expandsTo" }, + { "const": "spdx:Core/RelationshipType/exploitCreatedBy" }, + { "const": "spdx:Core/RelationshipType/fixedBy" }, + { "const": "spdx:Core/RelationshipType/fixedIn" }, + { "const": "spdx:Core/RelationshipType/foundBy" }, + { "const": "spdx:Core/RelationshipType/generates" }, + { "const": "spdx:Core/RelationshipType/hasAddedFile" }, + { "const": "spdx:Core/RelationshipType/hasAssessmentFor" }, + { "const": "spdx:Core/RelationshipType/hasAssociatedVulnerability" }, + { "const": "spdx:Core/RelationshipType/hasConcludedLicense" }, + { "const": "spdx:Core/RelationshipType/hasDataFile" }, + { "const": "spdx:Core/RelationshipType/hasDeclaredLicense" }, + { "const": "spdx:Core/RelationshipType/hasDeletedFile" }, + { "const": "spdx:Core/RelationshipType/hasDependencyManifest" }, + { "const": "spdx:Core/RelationshipType/hasDistributionArtifact" }, + { "const": "spdx:Core/RelationshipType/hasDocumentation" }, + { "const": "spdx:Core/RelationshipType/hasDynamicLink" }, + { "const": "spdx:Core/RelationshipType/hasEvidence" }, + { "const": "spdx:Core/RelationshipType/hasExample" }, + { "const": "spdx:Core/RelationshipType/hasHost" }, + { "const": "spdx:Core/RelationshipType/hasInput" }, + { "const": "spdx:Core/RelationshipType/hasMetadata" }, + { "const": "spdx:Core/RelationshipType/hasOptionalComponent" }, + { "const": "spdx:Core/RelationshipType/hasOptionalDependency" }, + { "const": "spdx:Core/RelationshipType/hasOutput" }, + { "const": "spdx:Core/RelationshipType/hasPrerequisite" }, + { "const": "spdx:Core/RelationshipType/hasProvidedDependency" }, + { "const": "spdx:Core/RelationshipType/hasRequirement" }, + { "const": "spdx:Core/RelationshipType/hasSpecification" }, + { "const": "spdx:Core/RelationshipType/hasStaticLink" }, + { "const": "spdx:Core/RelationshipType/hasTest" }, + { "const": "spdx:Core/RelationshipType/hasTestCase" }, + { "const": "spdx:Core/RelationshipType/hasVariant" }, + { "const": "spdx:Core/RelationshipType/invokedBy" }, + { "const": "spdx:Core/RelationshipType/modifiedBy" }, + { "const": "spdx:Core/RelationshipType/other" }, + { "const": "spdx:Core/RelationshipType/packagedBy" }, + { "const": "spdx:Core/RelationshipType/patchedBy" }, + { "const": "spdx:Core/RelationshipType/publishedBy" }, + { "const": "spdx:Core/RelationshipType/reportedBy" }, + { "const": "spdx:Core/RelationshipType/republishedBy" }, + { "const": "spdx:Core/RelationshipType/serializedInArtifact" }, + { "const": "spdx:Core/RelationshipType/testedOn" }, + { "const": "spdx:Core/RelationshipType/trainedOn" }, + { "const": "spdx:Core/RelationshipType/underInvestigationFor" }, + { "const": "spdx:Core/RelationshipType/usesTool" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "RelationshipType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SpdxDocument": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SpdxDocument" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SpdxDocument_props" } + ] + }, + "SpdxDocument_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SpdxDocument" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SpdxDocument_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "dataLicense": { + "$ref": "#/$defs/prop_SpdxDocument_dataLicense" + }, + "import": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_import_" + } + } + ] + }, + "namespaceMap": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_SpdxDocument_namespaceMap" + } + } + ] + } + } + } + ] + }, + "prop_SpdxDocument_dataLicense": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "prop_SpdxDocument_import_": { + "$ref": "#/$defs/ExternalMap_derived" + }, + "prop_SpdxDocument_namespaceMap": { + "$ref": "#/$defs/NamespaceMap_derived" + }, + "SupportType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "SupportType" } + ] + } + } + }, + { "$ref": "#/$defs/SupportType_props" } + ] + }, + "SupportType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SupportType" } + ] + }, + { "const": "spdx:Core/SupportType/deployed" }, + { "const": "spdx:Core/SupportType/development" }, + { "const": "spdx:Core/SupportType/endOfSupport" }, + { "const": "spdx:Core/SupportType/limitedSupport" }, + { "const": "spdx:Core/SupportType/noAssertion" }, + { "const": "spdx:Core/SupportType/noSupport" }, + { "const": "spdx:Core/SupportType/support" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SupportType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Tool": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Tool" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Tool_props" } + ] + }, + "Tool_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Tool" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Tool_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_ConfidentialityLevelType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_ConfidentialityLevelType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType_props" } + ] + }, + "dataset_ConfidentialityLevelType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" } + ] + }, + { "const": "spdx:Dataset/ConfidentialityLevelType/amber" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/clear" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/green" }, + { "const": "spdx:Dataset/ConfidentialityLevelType/red" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_ConfidentialityLevelType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetAvailabilityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetAvailabilityType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType_props" } + ] + }, + "dataset_DatasetAvailabilityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" } + ] + }, + { "const": "spdx:Dataset/DatasetAvailabilityType/clickthrough" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/directDownload" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/query" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/registration" }, + { "const": "spdx:Dataset/DatasetAvailabilityType/scrapingScript" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetAvailabilityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "dataset_DatasetType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetType" } + ] + } + } + }, + { "$ref": "#/$defs/dataset_DatasetType_props" } + ] + }, + "dataset_DatasetType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetType" } + ] + }, + { "const": "spdx:Dataset/DatasetType/audio" }, + { "const": "spdx:Dataset/DatasetType/categorical" }, + { "const": "spdx:Dataset/DatasetType/graph" }, + { "const": "spdx:Dataset/DatasetType/image" }, + { "const": "spdx:Dataset/DatasetType/noAssertion" }, + { "const": "spdx:Dataset/DatasetType/numeric" }, + { "const": "spdx:Dataset/DatasetType/other" }, + { "const": "spdx:Dataset/DatasetType/sensor" }, + { "const": "spdx:Dataset/DatasetType/structured" }, + { "const": "spdx:Dataset/DatasetType/syntactic" }, + { "const": "spdx:Dataset/DatasetType/text" }, + { "const": "spdx:Dataset/DatasetType/timeseries" }, + { "const": "spdx:Dataset/DatasetType/timestamp" }, + { "const": "spdx:Dataset/DatasetType/video" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_LicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_LicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_additionText": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardAdditionTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate" + } + }, + "required": [ + "expandedlicensing_additionText" + ] + } + ] + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_additionText": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_isDeprecatedAdditionId": { + "type": "boolean" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_LicenseAddition_expandedlicensing_standardAdditionTemplate": { + "type": "string" + }, + "expandedlicensing_ListedLicenseException": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicenseException" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException_props" } + ] + }, + "expandedlicensing_ListedLicenseException_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicenseException_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicenseException_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "extension_CdxPropertyEntry": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertyEntry" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertyEntry_props" } + ] + }, + "extension_CdxPropertyEntry_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertyEntry" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertyEntry_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + "extension_cdxPropName": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropName" + }, + "extension_cdxPropValue": { + "$ref": "#/$defs/prop_extension_CdxPropertyEntry_extension_cdxPropValue" + } + }, + "required": [ + "extension_cdxPropName" + ] + } + ] + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropName": { + "type": "string" + }, + "prop_extension_CdxPropertyEntry_extension_cdxPropValue": { + "type": "string" + }, + "extension_Extension": { + "allOf": [ + { + "type": "object", + "unevaluatedProperties": true, + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "allOf": [ + { "$ref": "#/$defs/IRI" }, + { "not": { "const": "extension_Extension" } } + ] + } + } + }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + "extension_Extension_derived": { + "anyOf": [ + { + "type": "object", + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/extension_Extension_props" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_Extension_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_CvssSeverityType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssSeverityType" } + ] + } + } + }, + { "$ref": "#/$defs/security_CvssSeverityType_props" } + ] + }, + "security_CvssSeverityType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssSeverityType" } + ] + }, + { "const": "spdx:Security/CvssSeverityType/critical" }, + { "const": "spdx:Security/CvssSeverityType/high" }, + { "const": "spdx:Security/CvssSeverityType/low" }, + { "const": "spdx:Security/CvssSeverityType/medium" }, + { "const": "spdx:Security/CvssSeverityType/none" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssSeverityType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_ExploitCatalogType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogType" } + ] + } + } + }, + { "$ref": "#/$defs/security_ExploitCatalogType_props" } + ] + }, + "security_ExploitCatalogType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogType" } + ] + }, + { "const": "spdx:Security/ExploitCatalogType/kev" }, + { "const": "spdx:Security/ExploitCatalogType/other" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_SsvcDecisionType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcDecisionType" } + ] + } + } + }, + { "$ref": "#/$defs/security_SsvcDecisionType_props" } + ] + }, + "security_SsvcDecisionType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcDecisionType" } + ] + }, + { "const": "spdx:Security/SsvcDecisionType/act" }, + { "const": "spdx:Security/SsvcDecisionType/attend" }, + { "const": "spdx:Security/SsvcDecisionType/track" }, + { "const": "spdx:Security/SsvcDecisionType/trackStar" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcDecisionType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexJustificationType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "security_VexJustificationType" } + ] + } + } + }, + { "$ref": "#/$defs/security_VexJustificationType_props" } + ] + }, + "security_VexJustificationType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexJustificationType" } + ] + }, + { "const": "spdx:Security/VexJustificationType/componentNotPresent" }, + { "const": "spdx:Security/VexJustificationType/inlineMitigationsAlreadyExist" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotInExecutePath" }, + { "const": "spdx:Security/VexJustificationType/vulnerableCodeNotPresent" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexJustificationType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "suppliedBy": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_suppliedBy" + }, + "security_assessedElement": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_assessedElement" + }, + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_VulnAssessmentRelationship_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_VulnAssessmentRelationship_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_security_VulnAssessmentRelationship_security_assessedElement": { + "$ref": "#/$defs/Element_derived" + }, + "prop_security_VulnAssessmentRelationship_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VulnAssessmentRelationship_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "simplelicensing_AnyLicenseInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_AnyLicenseInfo_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "simplelicensing_LicenseExpression": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_LicenseExpression" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression_props" } + ] + }, + "simplelicensing_LicenseExpression_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_LicenseExpression" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_LicenseExpression_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "simplelicensing_customIdToUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri" + } + } + ] + }, + "simplelicensing_licenseExpression": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression" + }, + "simplelicensing_licenseListVersion": { + "$ref": "#/$defs/prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion" + } + }, + "required": [ + "simplelicensing_licenseExpression" + ] + } + ] + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_customIdToUri": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseExpression": { + "type": "string" + }, + "prop_simplelicensing_LicenseExpression_simplelicensing_licenseListVersion": { + "pattern": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", + "type": "string" + }, + "simplelicensing_SimpleLicensingText": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "simplelicensing_SimpleLicensingText" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText_props" } + ] + }, + "simplelicensing_SimpleLicensingText_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "simplelicensing_SimpleLicensingText_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_simplelicensing_SimpleLicensingText_simplelicensing_licenseText": { + "type": "string" + }, + "software_ContentIdentifier": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifier" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifier_props" } + ] + }, + "software_ContentIdentifier_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifier" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifier_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "software_contentIdentifierType": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierType" + }, + "software_contentIdentifierValue": { + "$ref": "#/$defs/prop_software_ContentIdentifier_software_contentIdentifierValue" + } + }, + "required": [ + "software_contentIdentifierType", + "software_contentIdentifierValue" + ] + } + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierType": { + "enum": [ + "gitoid", + "swhid" + ] + }, + "prop_software_ContentIdentifier_software_contentIdentifierValue": { + "$ref": "#/$defs/anyURI" + }, + "software_ContentIdentifierType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_ContentIdentifierType" } + ] + } + } + }, + { "$ref": "#/$defs/software_ContentIdentifierType_props" } + ] + }, + "software_ContentIdentifierType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_ContentIdentifierType" } + ] + }, + { "const": "spdx:Software/ContentIdentifierType/gitoid" }, + { "const": "spdx:Software/ContentIdentifierType/swhid" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_ContentIdentifierType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_FileKindType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_FileKindType" } + ] + } + } + }, + { "$ref": "#/$defs/software_FileKindType_props" } + ] + }, + "software_FileKindType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_FileKindType" } + ] + }, + { "const": "spdx:Software/FileKindType/directory" }, + { "const": "spdx:Software/FileKindType/file" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_FileKindType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SbomType": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SbomType" } + ] + } + } + }, + { "$ref": "#/$defs/software_SbomType_props" } + ] + }, + "software_SbomType_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SbomType" } + ] + }, + { "const": "spdx:Software/SbomType/analyzed" }, + { "const": "spdx:Software/SbomType/build" }, + { "const": "spdx:Software/SbomType/deployed" }, + { "const": "spdx:Software/SbomType/design" }, + { "const": "spdx:Software/SbomType/runtime" }, + { "const": "spdx:Software/SbomType/source" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SbomType_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_SoftwarePurpose": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNodeOrIRI" }, + "type": { + "oneOf": [ + { "const": "software_SoftwarePurpose" } + ] + } + } + }, + { "$ref": "#/$defs/software_SoftwarePurpose_props" } + ] + }, + "software_SoftwarePurpose_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_SoftwarePurpose" } + ] + }, + { "const": "spdx:Software/SoftwarePurpose/application" }, + { "const": "spdx:Software/SoftwarePurpose/archive" }, + { "const": "spdx:Software/SoftwarePurpose/bom" }, + { "const": "spdx:Software/SoftwarePurpose/configuration" }, + { "const": "spdx:Software/SoftwarePurpose/container" }, + { "const": "spdx:Software/SoftwarePurpose/data" }, + { "const": "spdx:Software/SoftwarePurpose/device" }, + { "const": "spdx:Software/SoftwarePurpose/deviceDriver" }, + { "const": "spdx:Software/SoftwarePurpose/diskImage" }, + { "const": "spdx:Software/SoftwarePurpose/documentation" }, + { "const": "spdx:Software/SoftwarePurpose/evidence" }, + { "const": "spdx:Software/SoftwarePurpose/executable" }, + { "const": "spdx:Software/SoftwarePurpose/file" }, + { "const": "spdx:Software/SoftwarePurpose/filesystemImage" }, + { "const": "spdx:Software/SoftwarePurpose/firmware" }, + { "const": "spdx:Software/SoftwarePurpose/framework" }, + { "const": "spdx:Software/SoftwarePurpose/install" }, + { "const": "spdx:Software/SoftwarePurpose/library" }, + { "const": "spdx:Software/SoftwarePurpose/manifest" }, + { "const": "spdx:Software/SoftwarePurpose/model" }, + { "const": "spdx:Software/SoftwarePurpose/module" }, + { "const": "spdx:Software/SoftwarePurpose/operatingSystem" }, + { "const": "spdx:Software/SoftwarePurpose/other" }, + { "const": "spdx:Software/SoftwarePurpose/patch" }, + { "const": "spdx:Software/SoftwarePurpose/platform" }, + { "const": "spdx:Software/SoftwarePurpose/requirement" }, + { "const": "spdx:Software/SoftwarePurpose/source" }, + { "const": "spdx:Software/SoftwarePurpose/specification" }, + { "const": "spdx:Software/SoftwarePurpose/test" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwarePurpose_props": { + "allOf": [ + { "$ref": "#/$defs/SHACLClass" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "build_Build": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "build_Build" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/build_Build_props" } + ] + }, + "build_Build_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/build_Build" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "build_Build_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "build_buildEndTime": { + "$ref": "#/$defs/prop_build_Build_build_buildEndTime" + }, + "build_buildId": { + "$ref": "#/$defs/prop_build_Build_build_buildId" + }, + "build_buildStartTime": { + "$ref": "#/$defs/prop_build_Build_build_buildStartTime" + }, + "build_buildType": { + "$ref": "#/$defs/prop_build_Build_build_buildType" + }, + "build_configSourceDigest": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceDigest" + } + } + ] + }, + "build_configSourceEntrypoint": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceEntrypoint" + } + } + ] + }, + "build_configSourceUri": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_configSourceUri" + } + } + ] + }, + "build_environment": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_environment" + } + } + ] + }, + "build_parameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_build_Build_build_parameter" + } + } + ] + } + }, + "required": [ + "build_buildType" + ] + } + ] + }, + "prop_build_Build_build_buildEndTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildId": { + "type": "string" + }, + "prop_build_Build_build_buildStartTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_build_Build_build_buildType": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_configSourceDigest": { + "$ref": "#/$defs/Hash_derived" + }, + "prop_build_Build_build_configSourceEntrypoint": { + "type": "string" + }, + "prop_build_Build_build_configSourceUri": { + "$ref": "#/$defs/anyURI" + }, + "prop_build_Build_build_environment": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_build_Build_build_parameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "Agent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Agent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Agent_props" } + ] + }, + "Agent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/Agent" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Agent_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Annotation": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Annotation" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Annotation_props" } + ] + }, + "Annotation_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Annotation" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Annotation_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "annotationType": { + "$ref": "#/$defs/prop_Annotation_annotationType" + }, + "contentType": { + "$ref": "#/$defs/prop_Annotation_contentType" + }, + "statement": { + "$ref": "#/$defs/prop_Annotation_statement" + }, + "subject": { + "$ref": "#/$defs/prop_Annotation_subject" + } + }, + "required": [ + "annotationType", + "subject" + ] + } + ] + }, + "prop_Annotation_annotationType": { + "enum": [ + "other", + "review" + ] + }, + "prop_Annotation_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_Annotation_statement": { + "type": "string" + }, + "prop_Annotation_subject": { + "$ref": "#/$defs/Element_derived" + }, + "Artifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Artifact_props": { + "allOf": [ + { "$ref": "#/$defs/Element_props" }, + { + "type": "object", + "properties": { + "builtTime": { + "$ref": "#/$defs/prop_Artifact_builtTime" + }, + "originatedBy": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_originatedBy" + } + } + ] + }, + "releaseTime": { + "$ref": "#/$defs/prop_Artifact_releaseTime" + }, + "standardName": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_standardName" + } + } + ] + }, + "suppliedBy": { + "$ref": "#/$defs/prop_Artifact_suppliedBy" + }, + "supportLevel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_Artifact_supportLevel" + } + } + ] + }, + "validUntilTime": { + "$ref": "#/$defs/prop_Artifact_validUntilTime" + } + } + } + ] + }, + "prop_Artifact_builtTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_originatedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_releaseTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_Artifact_standardName": { + "type": "string" + }, + "prop_Artifact_suppliedBy": { + "$ref": "#/$defs/Agent_derived" + }, + "prop_Artifact_supportLevel": { + "enum": [ + "deployed", + "development", + "endOfSupport", + "limitedSupport", + "noAssertion", + "noSupport", + "support" + ] + }, + "prop_Artifact_validUntilTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "Bundle": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bundle" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bundle_props" } + ] + }, + "Bundle_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bundle" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bundle_props": { + "allOf": [ + { "$ref": "#/$defs/ElementCollection_props" }, + { + "type": "object", + "properties": { + "context": { + "$ref": "#/$defs/prop_Bundle_context" + } + } + } + ] + }, + "prop_Bundle_context": { + "type": "string" + }, + "Hash": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "Hash" } + ] + } + } + }, + { "$ref": "#/$defs/Hash_props" } + ] + }, + "Hash_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Hash" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Hash_props": { + "allOf": [ + { "$ref": "#/$defs/IntegrityMethod_props" }, + { + "type": "object", + "properties": { + "algorithm": { + "$ref": "#/$defs/prop_Hash_algorithm" + }, + "hashValue": { + "$ref": "#/$defs/prop_Hash_hashValue" + } + }, + "required": [ + "algorithm", + "hashValue" + ] + } + ] + }, + "prop_Hash_algorithm": { + "enum": [ + "adler32", + "blake2b256", + "blake2b384", + "blake2b512", + "blake3", + "crystalsDilithium", + "crystalsKyber", + "falcon", + "md2", + "md4", + "md5", + "md6", + "other", + "sha1", + "sha224", + "sha256", + "sha384", + "sha3_224", + "sha3_256", + "sha3_384", + "sha3_512", + "sha512" + ] + }, + "prop_Hash_hashValue": { + "type": "string" + }, + "LifecycleScopedRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "LifecycleScopedRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/LifecycleScopedRelationship_props" } + ] + }, + "LifecycleScopedRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/LifecycleScopedRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "LifecycleScopedRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/Relationship_props" }, + { + "type": "object", + "properties": { + "scope": { + "$ref": "#/$defs/prop_LifecycleScopedRelationship_scope" + } + } + } + ] + }, + "prop_LifecycleScopedRelationship_scope": { + "enum": [ + "build", + "design", + "development", + "other", + "runtime", + "test" + ] + }, + "Organization": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Organization" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Organization_props" } + ] + }, + "Organization_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Organization" } + ] + }, + { "const": "SpdxOrganization" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Organization_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "Person": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Person" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Person_props" } + ] + }, + "Person_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/Person" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Person_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "SoftwareAgent": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "SoftwareAgent" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/SoftwareAgent_props" } + ] + }, + "SoftwareAgent_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/SoftwareAgent" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "SoftwareAgent_props": { + "allOf": [ + { "$ref": "#/$defs/Agent_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ConjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ConjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_ConjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_CustomLicenseAddition": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicenseAddition" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition_props" } + ] + }, + "expandedlicensing_CustomLicenseAddition_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicenseAddition_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_LicenseAddition_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_DisjunctiveLicenseSet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet_props" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_DisjunctiveLicenseSet_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_member": { + "oneOf": [ + { + "type": "array", + "minItems": 2, + "items": { + "$ref": "#/$defs/prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member" + } + } + ] + } + }, + "required": [ + "expandedlicensing_member" + ] + } + ] + }, + "prop_expandedlicensing_DisjunctiveLicenseSet_expandedlicensing_member": { + "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_derived" + }, + "expandedlicensing_ExtendableLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ExtendableLicense_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_IndividualLicensingInfo": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_IndividualLicensingInfo" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo_props" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" } + ] + }, + { "const": "expandedlicensing_NoAssertionLicense" }, + { "const": "expandedlicensing_NoneLicense" }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_IndividualLicensingInfo_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_License_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_License_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_isDeprecatedLicenseId": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId" + }, + "expandedlicensing_isFsfLibre": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isFsfLibre" + }, + "expandedlicensing_isOsiApproved": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_isOsiApproved" + }, + "expandedlicensing_licenseXml": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_licenseXml" + }, + "expandedlicensing_obsoletedBy": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_obsoletedBy" + }, + "expandedlicensing_seeAlso": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_seeAlso" + } + } + ] + }, + "expandedlicensing_standardLicenseHeader": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader" + }, + "expandedlicensing_standardLicenseTemplate": { + "$ref": "#/$defs/prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate" + }, + "simplelicensing_licenseText": { + "$ref": "#/$defs/prop_expandedlicensing_License_simplelicensing_licenseText" + } + }, + "required": [ + "simplelicensing_licenseText" + ] + } + ] + }, + "prop_expandedlicensing_License_expandedlicensing_isDeprecatedLicenseId": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isFsfLibre": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_isOsiApproved": { + "type": "boolean" + }, + "prop_expandedlicensing_License_expandedlicensing_licenseXml": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_obsoletedBy": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_seeAlso": { + "$ref": "#/$defs/anyURI" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseHeader": { + "type": "string" + }, + "prop_expandedlicensing_License_expandedlicensing_standardLicenseTemplate": { + "type": "string" + }, + "prop_expandedlicensing_License_simplelicensing_licenseText": { + "type": "string" + }, + "expandedlicensing_ListedLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_ListedLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense_props" } + ] + }, + "expandedlicensing_ListedLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_ListedLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_ListedLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_deprecatedVersion": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion" + }, + "expandedlicensing_listVersionAdded": { + "$ref": "#/$defs/prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded" + } + } + } + ] + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_deprecatedVersion": { + "type": "string" + }, + "prop_expandedlicensing_ListedLicense_expandedlicensing_listVersionAdded": { + "type": "string" + }, + "expandedlicensing_OrLaterOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_OrLaterOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator_props" } + ] + }, + "expandedlicensing_OrLaterOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_OrLaterOperator_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_ExtendableLicense_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectLicense": { + "$ref": "#/$defs/prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense" + } + }, + "required": [ + "expandedlicensing_subjectLicense" + ] + } + ] + }, + "prop_expandedlicensing_OrLaterOperator_expandedlicensing_subjectLicense": { + "$ref": "#/$defs/expandedlicensing_License_derived" + }, + "expandedlicensing_WithAdditionOperator": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_WithAdditionOperator" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator_props" } + ] + }, + "expandedlicensing_WithAdditionOperator_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_WithAdditionOperator_props": { + "allOf": [ + { "$ref": "#/$defs/simplelicensing_AnyLicenseInfo_props" }, + { + "type": "object", + "properties": { + "expandedlicensing_subjectAddition": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition" + }, + "expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense" + } + }, + "required": [ + "expandedlicensing_subjectAddition", + "expandedlicensing_subjectExtendableLicense" + ] + } + ] + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectAddition": { + "$ref": "#/$defs/expandedlicensing_LicenseAddition_derived" + }, + "prop_expandedlicensing_WithAdditionOperator_expandedlicensing_subjectExtendableLicense": { + "$ref": "#/$defs/expandedlicensing_ExtendableLicense_derived" + }, + "extension_CdxPropertiesExtension": { + "allOf": [ + { + "type": "object", + "properties": { + "@id": { "$ref": "#/$defs/BlankNode" }, + "type": { + "oneOf": [ + { "const": "extension_CdxPropertiesExtension" } + ] + } + } + }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension_props" } + ] + }, + "extension_CdxPropertiesExtension_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/extension_CdxPropertiesExtension" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "extension_CdxPropertiesExtension_props": { + "allOf": [ + { "$ref": "#/$defs/extension_Extension_props" }, + { + "type": "object", + "properties": { + "extension_cdxProperty": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_extension_CdxPropertiesExtension_extension_cdxProperty" + } + } + ] + } + }, + "required": [ + "extension_cdxProperty" + ] + } + ] + }, + "prop_extension_CdxPropertiesExtension_extension_cdxProperty": { + "$ref": "#/$defs/extension_CdxPropertyEntry_derived" + }, + "security_CvssV2VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV2VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV2VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_score" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV2VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV2VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV3VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV3VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV3VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV3VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV3VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_CvssV4VulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_CvssV4VulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship_props" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_CvssV4VulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_score": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_score" + }, + "security_severity": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_severity" + }, + "security_vectorString": { + "$ref": "#/$defs/prop_security_CvssV4VulnAssessmentRelationship_security_vectorString" + } + }, + "required": [ + "security_score", + "security_severity", + "security_vectorString" + ] + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_score": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_severity": { + "enum": [ + "critical", + "high", + "low", + "medium", + "none" + ] + }, + "prop_security_CvssV4VulnAssessmentRelationship_security_vectorString": { + "type": "string" + }, + "security_EpssVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_EpssVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship_props" } + ] + }, + "security_EpssVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_EpssVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_percentile": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_percentile" + }, + "security_probability": { + "$ref": "#/$defs/prop_security_EpssVulnAssessmentRelationship_security_probability" + } + }, + "required": [ + "security_percentile", + "security_probability" + ] + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_percentile": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "prop_security_EpssVulnAssessmentRelationship_security_probability": { + "oneOf": [ + { + "type": "number" + }, + { + "type": "string", + "pattern": "^-?[0-9]+(\\.[0-9]*)?$" + } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_ExploitCatalogVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship_props" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_ExploitCatalogVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_catalogType": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType" + }, + "security_exploited": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited" + }, + "security_locator": { + "$ref": "#/$defs/prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator" + } + }, + "required": [ + "security_catalogType", + "security_exploited", + "security_locator" + ] + } + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_catalogType": { + "enum": [ + "kev", + "other" + ] + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_exploited": { + "type": "boolean" + }, + "prop_security_ExploitCatalogVulnAssessmentRelationship_security_locator": { + "$ref": "#/$defs/anyURI" + }, + "security_SsvcVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_SsvcVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship_props" } + ] + }, + "security_SsvcVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_SsvcVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_decisionType": { + "$ref": "#/$defs/prop_security_SsvcVulnAssessmentRelationship_security_decisionType" + } + }, + "required": [ + "security_decisionType" + ] + } + ] + }, + "prop_security_SsvcVulnAssessmentRelationship_security_decisionType": { + "enum": [ + "act", + "attend", + "track", + "trackStar" + ] + }, + "security_VexVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_statusNotes": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_statusNotes" + }, + "security_vexVersion": { + "$ref": "#/$defs/prop_security_VexVulnAssessmentRelationship_security_vexVersion" + } + } + } + ] + }, + "prop_security_VexVulnAssessmentRelationship_security_statusNotes": { + "type": "string" + }, + "prop_security_VexVulnAssessmentRelationship_security_vexVersion": { + "type": "string" + }, + "security_Vulnerability": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_Vulnerability" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_Vulnerability_props" } + ] + }, + "security_Vulnerability_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_Vulnerability" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_Vulnerability_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "security_modifiedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_modifiedTime" + }, + "security_publishedTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_publishedTime" + }, + "security_withdrawnTime": { + "$ref": "#/$defs/prop_security_Vulnerability_security_withdrawnTime" + } + } + } + ] + }, + "prop_security_Vulnerability_security_modifiedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_publishedTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_Vulnerability_security_withdrawnTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "software_SoftwareArtifact_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_SoftwareArtifact_props": { + "allOf": [ + { "$ref": "#/$defs/Artifact_props" }, + { + "type": "object", + "properties": { + "software_additionalPurpose": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_additionalPurpose" + } + } + ] + }, + "software_attributionText": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_attributionText" + } + } + ] + }, + "software_contentIdentifier": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_contentIdentifier" + } + } + ] + }, + "software_copyrightText": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_copyrightText" + }, + "software_primaryPurpose": { + "$ref": "#/$defs/prop_software_SoftwareArtifact_software_primaryPurpose" + } + } + } + ] + }, + "prop_software_SoftwareArtifact_software_additionalPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "prop_software_SoftwareArtifact_software_attributionText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_contentIdentifier": { + "$ref": "#/$defs/software_ContentIdentifier_derived" + }, + "prop_software_SoftwareArtifact_software_copyrightText": { + "type": "string" + }, + "prop_software_SoftwareArtifact_software_primaryPurpose": { + "enum": [ + "application", + "archive", + "bom", + "configuration", + "container", + "data", + "device", + "deviceDriver", + "diskImage", + "documentation", + "evidence", + "executable", + "file", + "filesystemImage", + "firmware", + "framework", + "install", + "library", + "manifest", + "model", + "module", + "operatingSystem", + "other", + "patch", + "platform", + "requirement", + "source", + "specification", + "test" + ] + }, + "Bom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "Bom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/Bom_props" } + ] + }, + "Bom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/Bom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "Bom_props": { + "allOf": [ + { "$ref": "#/$defs/Bundle_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "expandedlicensing_CustomLicense": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "expandedlicensing_CustomLicense" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense_props" } + ] + }, + "expandedlicensing_CustomLicense_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/expandedlicensing_CustomLicense" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "expandedlicensing_CustomLicense_props": { + "allOf": [ + { "$ref": "#/$defs/expandedlicensing_License_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_actionStatement": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement" + }, + "security_actionStatementTime": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime" + } + } + ] + } + } + } + ] + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatement": { + "type": "string" + }, + "prop_security_VexAffectedVulnAssessmentRelationship_security_actionStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "security_VexFixedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexFixedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship_props" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexFixedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexNotAffectedVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship_props" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexNotAffectedVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + "security_impactStatement": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement" + }, + "security_impactStatementTime": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime" + }, + "security_justificationType": { + "$ref": "#/$defs/prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType" + } + } + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatement": { + "type": "string" + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_impactStatementTime": { + "type": "string", + "allOf": [ + { + "pattern": "^[0-9]{4}-[0-1][0-9]-[0-3][0-9]T[0-2][0-9]:[0-6][0-9]:[0-6][0-9](Z|[+-][0-9]{2}:[0-9]{2})$" + }, + { + "pattern": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + "prop_security_VexNotAffectedVulnAssessmentRelationship_security_justificationType": { + "enum": [ + "componentNotPresent", + "inlineMitigationsAlreadyExist", + "vulnerableCodeCannotBeControlledByAdversary", + "vulnerableCodeNotInExecutePath", + "vulnerableCodeNotPresent" + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship_props" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "security_VexUnderInvestigationVulnAssessmentRelationship_props": { + "allOf": [ + { "$ref": "#/$defs/security_VexVulnAssessmentRelationship_props" }, + { + "type": "object", + "properties": { + } + } + ] + }, + "software_File": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_File" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_File_props" } + ] + }, + "software_File_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_File" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_File_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "contentType": { + "$ref": "#/$defs/prop_software_File_contentType" + }, + "software_fileKind": { + "$ref": "#/$defs/prop_software_File_software_fileKind" + } + } + } + ] + }, + "prop_software_File_contentType": { + "pattern": "^[^\\/]+\\/[^\\/]+$", + "type": "string" + }, + "prop_software_File_software_fileKind": { + "enum": [ + "directory", + "file" + ] + }, + "software_Package": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Package" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Package_props" } + ] + }, + "software_Package_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" }, + { "$ref": "#/$defs/software_Package" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Package_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_downloadLocation": { + "$ref": "#/$defs/prop_software_Package_software_downloadLocation" + }, + "software_homePage": { + "$ref": "#/$defs/prop_software_Package_software_homePage" + }, + "software_packageUrl": { + "$ref": "#/$defs/prop_software_Package_software_packageUrl" + }, + "software_packageVersion": { + "$ref": "#/$defs/prop_software_Package_software_packageVersion" + }, + "software_sourceInfo": { + "$ref": "#/$defs/prop_software_Package_software_sourceInfo" + } + } + } + ] + }, + "prop_software_Package_software_downloadLocation": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_homePage": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageUrl": { + "$ref": "#/$defs/anyURI" + }, + "prop_software_Package_software_packageVersion": { + "type": "string" + }, + "prop_software_Package_software_sourceInfo": { + "type": "string" + }, + "software_Sbom": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Sbom" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Sbom_props" } + ] + }, + "software_Sbom_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Sbom" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Sbom_props": { + "allOf": [ + { "$ref": "#/$defs/Bom_props" }, + { + "type": "object", + "properties": { + "software_sbomType": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_software_Sbom_software_sbomType" + } + } + ] + } + } + } + ] + }, + "prop_software_Sbom_software_sbomType": { + "enum": [ + "analyzed", + "build", + "deployed", + "design", + "runtime", + "source" + ] + }, + "software_Snippet": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "software_Snippet" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/software_Snippet_props" } + ] + }, + "software_Snippet_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/software_Snippet" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "software_Snippet_props": { + "allOf": [ + { "$ref": "#/$defs/software_SoftwareArtifact_props" }, + { + "type": "object", + "properties": { + "software_byteRange": { + "$ref": "#/$defs/prop_software_Snippet_software_byteRange" + }, + "software_lineRange": { + "$ref": "#/$defs/prop_software_Snippet_software_lineRange" + }, + "software_snippetFromFile": { + "$ref": "#/$defs/prop_software_Snippet_software_snippetFromFile" + } + }, + "required": [ + "software_snippetFromFile" + ] + } + ] + }, + "prop_software_Snippet_software_byteRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_lineRange": { + "$ref": "#/$defs/PositiveIntegerRange_derived" + }, + "prop_software_Snippet_software_snippetFromFile": { + "$ref": "#/$defs/software_File_derived" + }, + "ai_AIPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "ai_AIPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/ai_AIPackage_props" } + ] + }, + "ai_AIPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/ai_AIPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "ai_AIPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "ai_autonomyType": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_autonomyType" + }, + "ai_domain": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_domain" + } + } + ] + }, + "ai_energyConsumption": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_energyConsumption" + }, + "ai_hyperparameter": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_hyperparameter" + } + } + ] + }, + "ai_informationAboutApplication": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutApplication" + }, + "ai_informationAboutTraining": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_informationAboutTraining" + }, + "ai_limitation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_limitation" + }, + "ai_metric": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metric" + } + } + ] + }, + "ai_metricDecisionThreshold": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_metricDecisionThreshold" + } + } + ] + }, + "ai_modelDataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelDataPreprocessing" + } + } + ] + }, + "ai_modelExplainability": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_modelExplainability" + } + } + ] + }, + "ai_safetyRiskAssessment": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_safetyRiskAssessment" + }, + "ai_standardCompliance": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_standardCompliance" + } + } + ] + }, + "ai_typeOfModel": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_typeOfModel" + } + } + ] + }, + "ai_useSensitivePersonalInformation": { + "$ref": "#/$defs/prop_ai_AIPackage_ai_useSensitivePersonalInformation" + } + } + } + ] + }, + "prop_ai_AIPackage_ai_autonomyType": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_ai_AIPackage_ai_domain": { + "type": "string" + }, + "prop_ai_AIPackage_ai_energyConsumption": { + "$ref": "#/$defs/ai_EnergyConsumption_derived" + }, + "prop_ai_AIPackage_ai_hyperparameter": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_informationAboutApplication": { + "type": "string" + }, + "prop_ai_AIPackage_ai_informationAboutTraining": { + "type": "string" + }, + "prop_ai_AIPackage_ai_limitation": { + "type": "string" + }, + "prop_ai_AIPackage_ai_metric": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_metricDecisionThreshold": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "prop_ai_AIPackage_ai_modelDataPreprocessing": { + "type": "string" + }, + "prop_ai_AIPackage_ai_modelExplainability": { + "type": "string" + }, + "prop_ai_AIPackage_ai_safetyRiskAssessment": { + "enum": [ + "high", + "low", + "medium", + "serious" + ] + }, + "prop_ai_AIPackage_ai_standardCompliance": { + "type": "string" + }, + "prop_ai_AIPackage_ai_typeOfModel": { + "type": "string" + }, + "prop_ai_AIPackage_ai_useSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "dataset_DatasetPackage": { + "allOf": [ + { + "type": "object", + "properties": { + "spdxId": { "$ref": "#/$defs/IRI" }, + "type": { + "oneOf": [ + { "const": "dataset_DatasetPackage" } + ] + } + }, + "required": ["spdxId"] + }, + { "$ref": "#/$defs/dataset_DatasetPackage_props" } + ] + }, + "dataset_DatasetPackage_derived": { + "anyOf": [ + { + "type": "object", + "unevaluatedProperties": false, + "anyOf": [ + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + }, + { "$ref": "#/$defs/BlankNodeOrIRI" } + ] + }, + "dataset_DatasetPackage_props": { + "allOf": [ + { "$ref": "#/$defs/software_Package_props" }, + { + "type": "object", + "properties": { + "dataset_anonymizationMethodUsed": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed" + } + } + ] + }, + "dataset_confidentialityLevel": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_confidentialityLevel" + }, + "dataset_dataCollectionProcess": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataCollectionProcess" + }, + "dataset_dataPreprocessing": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_dataPreprocessing" + } + } + ] + }, + "dataset_datasetAvailability": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetAvailability" + }, + "dataset_datasetNoise": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetNoise" + }, + "dataset_datasetSize": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetSize" + }, + "dataset_datasetType": { + "oneOf": [ + { + "type": "array", + "minItems": 1, + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetType" + } + } + ] + }, + "dataset_datasetUpdateMechanism": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism" + }, + "dataset_hasSensitivePersonalInformation": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation" + }, + "dataset_intendedUse": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_intendedUse" + }, + "dataset_knownBias": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_knownBias" + } + } + ] + }, + "dataset_sensor": { + "oneOf": [ + { + "type": "array", + "items": { + "$ref": "#/$defs/prop_dataset_DatasetPackage_dataset_sensor" + } + } + ] + } + }, + "required": [ + "dataset_datasetType" + ] + } + ] + }, + "prop_dataset_DatasetPackage_dataset_anonymizationMethodUsed": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_confidentialityLevel": { + "enum": [ + "amber", + "clear", + "green", + "red" + ] + }, + "prop_dataset_DatasetPackage_dataset_dataCollectionProcess": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_dataPreprocessing": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetAvailability": { + "enum": [ + "clickthrough", + "directDownload", + "query", + "registration", + "scrapingScript" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetNoise": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_datasetSize": { + "type": "integer", + "minimum": 0 + }, + "prop_dataset_DatasetPackage_dataset_datasetType": { + "enum": [ + "audio", + "categorical", + "graph", + "image", + "noAssertion", + "numeric", + "other", + "sensor", + "structured", + "syntactic", + "text", + "timeseries", + "timestamp", + "video" + ] + }, + "prop_dataset_DatasetPackage_dataset_datasetUpdateMechanism": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_hasSensitivePersonalInformation": { + "enum": [ + "no", + "noAssertion", + "yes" + ] + }, + "prop_dataset_DatasetPackage_dataset_intendedUse": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_knownBias": { + "type": "string" + }, + "prop_dataset_DatasetPackage_dataset_sensor": { + "$ref": "#/$defs/DictionaryEntry_derived" + }, + "IRI": { + "type": "string", + "pattern": "^(?!_:).+:.+" + }, + "BlankNode": { + "type": "string", + "pattern": "^_:.+" + }, + "BlankNodeOrIRI": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { "$ref": "#/$defs/BlankNode" } + ] + }, + "anyURI": { + "type": "string" + }, + "SHACLClass": { + "type": "object", + "properties": { + "type": { + "oneOf": [ + { "$ref": "#/$defs/IRI" }, + { + "enum": [ + "http://spdx.invalid./AbstractClass", + "ai_EnergyConsumption", + "ai_EnergyConsumptionDescription", + "ai_EnergyUnitType", + "ai_SafetyRiskAssessmentType", + "AnnotationType", + "CreationInfo", + "DictionaryEntry", + "ExternalIdentifier", + "ExternalIdentifierType", + "ExternalMap", + "ExternalRef", + "ExternalRefType", + "HashAlgorithm", + "LifecycleScopeType", + "NamespaceMap", + "PackageVerificationCode", + "PositiveIntegerRange", + "PresenceType", + "ProfileIdentifierType", + "Relationship", + "RelationshipCompleteness", + "RelationshipType", + "SpdxDocument", + "SupportType", + "Tool", + "dataset_ConfidentialityLevelType", + "dataset_DatasetAvailabilityType", + "dataset_DatasetType", + "expandedlicensing_ListedLicenseException", + "extension_CdxPropertyEntry", + "security_CvssSeverityType", + "security_ExploitCatalogType", + "security_SsvcDecisionType", + "security_VexJustificationType", + "simplelicensing_LicenseExpression", + "simplelicensing_SimpleLicensingText", + "software_ContentIdentifier", + "software_ContentIdentifierType", + "software_FileKindType", + "software_SbomType", + "software_SoftwarePurpose", + "build_Build", + "Agent", + "Annotation", + "Bundle", + "Hash", + "LifecycleScopedRelationship", + "Organization", + "Person", + "SoftwareAgent", + "expandedlicensing_ConjunctiveLicenseSet", + "expandedlicensing_CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet", + "expandedlicensing_IndividualLicensingInfo", + "expandedlicensing_ListedLicense", + "expandedlicensing_OrLaterOperator", + "expandedlicensing_WithAdditionOperator", + "extension_CdxPropertiesExtension", + "security_CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship", + "security_ExploitCatalogVulnAssessmentRelationship", + "security_SsvcVulnAssessmentRelationship", + "security_Vulnerability", + "Bom", + "expandedlicensing_CustomLicense", + "security_VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship", + "security_VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship", + "software_File", + "software_Package", + "software_Sbom", + "software_Snippet", + "ai_AIPackage", + "dataset_DatasetPackage" + ] + } + ] + } + }, + "required": ["type"] + }, + "AnyClass": { + "anyOf": [ + { "$ref": "#/$defs/http_spdxinvalidAbstractClass" }, + { "$ref": "#/$defs/ai_EnergyConsumption" }, + { "$ref": "#/$defs/ai_EnergyConsumptionDescription" }, + { "$ref": "#/$defs/ai_EnergyUnitType" }, + { "$ref": "#/$defs/ai_SafetyRiskAssessmentType" }, + { "$ref": "#/$defs/AnnotationType" }, + { "$ref": "#/$defs/CreationInfo" }, + { "$ref": "#/$defs/DictionaryEntry" }, + { "$ref": "#/$defs/ExternalIdentifier" }, + { "$ref": "#/$defs/ExternalIdentifierType" }, + { "$ref": "#/$defs/ExternalMap" }, + { "$ref": "#/$defs/ExternalRef" }, + { "$ref": "#/$defs/ExternalRefType" }, + { "$ref": "#/$defs/HashAlgorithm" }, + { "$ref": "#/$defs/LifecycleScopeType" }, + { "$ref": "#/$defs/NamespaceMap" }, + { "$ref": "#/$defs/PackageVerificationCode" }, + { "$ref": "#/$defs/PositiveIntegerRange" }, + { "$ref": "#/$defs/PresenceType" }, + { "$ref": "#/$defs/ProfileIdentifierType" }, + { "$ref": "#/$defs/Relationship" }, + { "$ref": "#/$defs/RelationshipCompleteness" }, + { "$ref": "#/$defs/RelationshipType" }, + { "$ref": "#/$defs/SpdxDocument" }, + { "$ref": "#/$defs/SupportType" }, + { "$ref": "#/$defs/Tool" }, + { "$ref": "#/$defs/dataset_ConfidentialityLevelType" }, + { "$ref": "#/$defs/dataset_DatasetAvailabilityType" }, + { "$ref": "#/$defs/dataset_DatasetType" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicenseException" }, + { "$ref": "#/$defs/extension_CdxPropertyEntry" }, + { "$ref": "#/$defs/security_CvssSeverityType" }, + { "$ref": "#/$defs/security_ExploitCatalogType" }, + { "$ref": "#/$defs/security_SsvcDecisionType" }, + { "$ref": "#/$defs/security_VexJustificationType" }, + { "$ref": "#/$defs/simplelicensing_LicenseExpression" }, + { "$ref": "#/$defs/simplelicensing_SimpleLicensingText" }, + { "$ref": "#/$defs/software_ContentIdentifier" }, + { "$ref": "#/$defs/software_ContentIdentifierType" }, + { "$ref": "#/$defs/software_FileKindType" }, + { "$ref": "#/$defs/software_SbomType" }, + { "$ref": "#/$defs/software_SoftwarePurpose" }, + { "$ref": "#/$defs/build_Build" }, + { "$ref": "#/$defs/Agent" }, + { "$ref": "#/$defs/Annotation" }, + { "$ref": "#/$defs/Bundle" }, + { "$ref": "#/$defs/Hash" }, + { "$ref": "#/$defs/LifecycleScopedRelationship" }, + { "$ref": "#/$defs/Organization" }, + { "$ref": "#/$defs/Person" }, + { "$ref": "#/$defs/SoftwareAgent" }, + { "$ref": "#/$defs/expandedlicensing_ConjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicenseAddition" }, + { "$ref": "#/$defs/expandedlicensing_DisjunctiveLicenseSet" }, + { "$ref": "#/$defs/expandedlicensing_IndividualLicensingInfo" }, + { "$ref": "#/$defs/expandedlicensing_ListedLicense" }, + { "$ref": "#/$defs/expandedlicensing_OrLaterOperator" }, + { "$ref": "#/$defs/expandedlicensing_WithAdditionOperator" }, + { "$ref": "#/$defs/extension_CdxPropertiesExtension" }, + { "$ref": "#/$defs/security_CvssV2VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV3VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_CvssV4VulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_EpssVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_ExploitCatalogVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_SsvcVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_Vulnerability" }, + { "$ref": "#/$defs/Bom" }, + { "$ref": "#/$defs/expandedlicensing_CustomLicense" }, + { "$ref": "#/$defs/security_VexAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexFixedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexNotAffectedVulnAssessmentRelationship" }, + { "$ref": "#/$defs/security_VexUnderInvestigationVulnAssessmentRelationship" }, + { "$ref": "#/$defs/software_File" }, + { "$ref": "#/$defs/software_Package" }, + { "$ref": "#/$defs/software_Sbom" }, + { "$ref": "#/$defs/software_Snippet" }, + { "$ref": "#/$defs/ai_AIPackage" }, + { "$ref": "#/$defs/dataset_DatasetPackage" } + ] + } + } +} diff --git a/v3.0/rdf/spdx-context.jsonld b/v3.0/rdf/spdx-context.jsonld new file mode 100644 index 0000000000..3f845de1ba --- /dev/null +++ b/v3.0/rdf/spdx-context.jsonld @@ -0,0 +1,815 @@ +{ + "@context": { + "Agent": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "Annotation": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "AnnotationType": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "Artifact": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "Bom": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "Bundle": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "CreationInfo": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "DictionaryEntry": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "Element": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "ElementCollection": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "ExternalIdentifier": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "ExternalIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "ExternalMap": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "ExternalRef": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "ExternalRefType": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "Hash": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "HashAlgorithm": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "IntegrityMethod": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "LifecycleScopeType": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "LifecycleScopedRelationship": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "NamespaceMap": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "NoAssertionElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "NoneElement": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "Organization": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "PackageVerificationCode": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "Person": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "PositiveIntegerRange": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "PresenceType": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "ProfileIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "Relationship": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "RelationshipCompleteness": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "RelationshipType": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "SoftwareAgent": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "SpdxDocument": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "SpdxOrganization": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "SupportType": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "Tool": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "ai_AIPackage": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "ai_EnergyConsumption": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "ai_EnergyConsumptionDescription": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "ai_EnergyUnitType": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "ai_SafetyRiskAssessmentType": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "ai_autonomyType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": "@vocab" + }, + "ai_domain": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_energyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": "@vocab" + }, + "ai_energyQuantity": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "ai_energyUnit": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": "@vocab" + }, + "ai_finetuningEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": "@vocab" + }, + "ai_hyperparameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": "@vocab" + }, + "ai_inferenceEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": "@vocab" + }, + "ai_informationAboutApplication": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_informationAboutTraining": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_limitation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_metric": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": "@vocab" + }, + "ai_metricDecisionThreshold": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": "@vocab" + }, + "ai_modelDataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_modelExplainability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_safetyRiskAssessment": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": "@vocab" + }, + "ai_standardCompliance": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_trainingEnergyConsumption": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": "@vocab" + }, + "ai_typeOfModel": { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "ai_useSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": "@vocab" + }, + "algorithm": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": "@vocab" + }, + "annotationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": "@vocab" + }, + "beginIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "build_Build": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "build_buildEndTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_buildStartTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "build_buildType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_configSourceDigest": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": "@vocab" + }, + "build_configSourceEntrypoint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "build_configSourceUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "build_environment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": "@vocab" + }, + "build_parameter": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": "@vocab" + }, + "builtTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "comment": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "completeness": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": "@vocab" + }, + "contentType": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "context": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "created": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "createdBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": "@vocab" + }, + "createdUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": "@vocab" + }, + "creationInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": "@vocab" + }, + "dataLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": "@vocab" + }, + "dataset_ConfidentialityLevelType": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "dataset_DatasetAvailabilityType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "dataset_DatasetPackage": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "dataset_DatasetType": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "dataset_anonymizationMethodUsed": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_confidentialityLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": "@vocab" + }, + "dataset_dataCollectionProcess": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_dataPreprocessing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetAvailability": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": "@vocab" + }, + "dataset_datasetNoise": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_datasetSize": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + }, + "dataset_datasetType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": "@vocab" + }, + "dataset_datasetUpdateMechanism": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_hasSensitivePersonalInformation": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": "@vocab" + }, + "dataset_intendedUse": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_knownBias": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "dataset_sensor": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": "@vocab" + }, + "definingArtifact": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": "@vocab" + }, + "description": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "element": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": "@vocab" + }, + "endIntegerRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": "http://www.w3.org/2001/XMLSchema#positiveInteger" + }, + "endTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "expandedlicensing_ConjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "expandedlicensing_CustomLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "expandedlicensing_CustomLicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "expandedlicensing_DisjunctiveLicenseSet": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "expandedlicensing_ExtendableLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "expandedlicensing_IndividualLicensingInfo": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "expandedlicensing_License": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "expandedlicensing_LicenseAddition": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "expandedlicensing_ListedLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "expandedlicensing_ListedLicenseException": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "expandedlicensing_NoAssertionLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "expandedlicensing_NoneLicense": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "expandedlicensing_OrLaterOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "expandedlicensing_WithAdditionOperator": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "expandedlicensing_additionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_deprecatedVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_isDeprecatedAdditionId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isDeprecatedLicenseId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isFsfLibre": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_isOsiApproved": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "expandedlicensing_licenseXml": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_listVersionAdded": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_member": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": "@vocab" + }, + "expandedlicensing_obsoletedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_seeAlso": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "expandedlicensing_standardAdditionTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseHeader": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_standardLicenseTemplate": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "expandedlicensing_subjectAddition": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": "@vocab" + }, + "expandedlicensing_subjectExtendableLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": "@vocab" + }, + "expandedlicensing_subjectLicense": { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": "@vocab" + }, + "extension": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": "@vocab" + }, + "extension_CdxPropertiesExtension": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "extension_CdxPropertyEntry": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "extension_Extension": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "extension_cdxPropName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxPropValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "extension_cdxProperty": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": "@vocab" + }, + "externalIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": "@vocab" + }, + "externalIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": "@vocab" + }, + "externalRef": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": "@vocab" + }, + "externalRefType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": "@vocab" + }, + "externalSpdxId": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "from": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": "@vocab" + }, + "hashValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "identifierLocator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "import": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": "@vocab" + }, + "issuingAuthority": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "key": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "locationHint": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "name": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "namespace": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "namespaceMap": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": "@vocab" + }, + "originatedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": "@vocab" + }, + "packageVerificationCodeExcludedFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "prefix": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "profileConformance": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": "@vocab" + }, + "relationshipType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": "@vocab" + }, + "releaseTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "rootElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": "@vocab" + }, + "scope": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": "@vocab" + }, + "security_CvssSeverityType": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "security_CvssV2VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "security_CvssV3VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "security_CvssV4VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "security_EpssVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "security_ExploitCatalogType": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "security_ExploitCatalogVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "security_SsvcDecisionType": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "security_SsvcVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "security_VexAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "security_VexFixedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "security_VexJustificationType": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "security_VexNotAffectedVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "security_VexUnderInvestigationVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "security_VexVulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "security_VulnAssessmentRelationship": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "security_Vulnerability": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "security_actionStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_actionStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_assessedElement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": "@vocab" + }, + "security_catalogType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": "@vocab" + }, + "security_decisionType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": "@vocab" + }, + "security_exploited": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": "http://www.w3.org/2001/XMLSchema#boolean" + }, + "security_impactStatement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_impactStatementTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_justificationType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": "@vocab" + }, + "security_locator": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "security_modifiedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_percentile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_probability": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_publishedTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "security_score": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": "http://www.w3.org/2001/XMLSchema#decimal" + }, + "security_severity": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": "@vocab" + }, + "security_statusNotes": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vectorString": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_vexVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "security_withdrawnTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "simplelicensing_AnyLicenseInfo": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "simplelicensing_LicenseExpression": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "simplelicensing_SimpleLicensingText": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "simplelicensing_customIdToUri": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": "@vocab" + }, + "simplelicensing_licenseExpression": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseListVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "simplelicensing_licenseText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_ContentIdentifier": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "software_ContentIdentifierType": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "software_File": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "software_FileKindType": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "software_Package": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "software_Sbom": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "software_SbomType": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "software_Snippet": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "software_SoftwareArtifact": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "software_SoftwarePurpose": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "software_additionalPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": "@vocab" + }, + "software_attributionText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_byteRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_contentIdentifier": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + }, + "software_contentIdentifierType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": "@vocab" + }, + "software_contentIdentifierValue": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_copyrightText": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_downloadLocation": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_fileKind": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": "@vocab" + }, + "software_homePage": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_lineRange": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + }, + "software_packageUrl": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": "http://www.w3.org/2001/XMLSchema#anyURI" + }, + "software_packageVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "software_primaryPurpose": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": "@vocab" + }, + "software_sbomType": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": "@vocab" + }, + "software_snippetFromFile": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": "@vocab" + }, + "software_sourceInfo": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "spdx": "https://spdx.org/rdf/3.0.1/terms/", + "spdxId": "@id", + "specVersion": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "standardName": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "startTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "statement": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "subject": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": "@vocab" + }, + "summary": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "suppliedBy": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": "@vocab" + }, + "supportLevel": { + "@context": { + "@vocab": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/" + }, + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": "@vocab" + }, + "to": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": "@vocab" + }, + "type": "@type", + "validUntilTime": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + }, + "value": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": "http://www.w3.org/2001/XMLSchema#string" + }, + "verifiedUsing": { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": "@vocab" + } + } +} \ No newline at end of file diff --git a/v3.0/rdf/spdx-model.hext b/v3.0/rdf/spdx-model.hext new file mode 100644 index 0000000000..7739f1e221 --- /dev/null +++ b/v3.0/rdf/spdx-model.hext @@ -0,0 +1,3486 @@ +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "republishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N7512c361fa6640a2a2d5027dcca31ae1", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Identify the version of a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A property name with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a runtime analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nba1a37de924c499f9ea9e93d8961d20a", "localId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Ndf280172f0834544a7759efee893b7d1", "localId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#comment", "[FALCON](https://falcon-sign.info/falcon.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location for more information regarding an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#label", "license", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N844378f645c04baba1e77ba4c91a005c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#label", "socialMedia", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N08c151d77c034260b733a9cd4fb2db47", "localId", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4c52d9d036934841b17eac13b27a39f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a standard that is being complied with.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for the portion of an AnyLicenseInfo representing a license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/locator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:N8919fac9e03440b19957656e4c6d5f47", "localId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#label", "attend", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides a requirement needed as input for another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS base, temporal, threat, or environmental severity type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/startTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:N453867a1e4d041d0b9ef358011ed5898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "globalId", "", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "exportControlAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3b580065725749b7ab5e332a55260a05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0530f2e80adb4606aeaa0ee0c0b381af", "localId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "globalId", "", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nefb954041ff74e1c981f465bcaab5d3b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes how the dataset was collected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the security adversary model for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#in", "_:N13b712ac882f4d5ca50bb0fd516bd04d", "localId", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ndb4e54e4ff284342bf2f11f51d7f2567", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "globalId", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 3 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the documentation for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c1afce8b8f14d94b7b00b67814f4a92", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b9123c429a143928240efffd877c09e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#label", "nuget", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne74d9ee0343b4b299f81fa823f3baa12", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N402019128a2449e3b5be3f04ec1f62f4", "localId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5db3bc3ac4ca4493a796356af601403e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N804dd6908e264d10be7ab47179d84223", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N308fb6485f7d4864923946d7ba83b984", "localId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a test used to verify functionality on an software element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#label", "doesNotAffect", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69eefd6c115c4499be60a56a329082ed", "localId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#label", "bower", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#comment", "A key used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#label", "platform", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N3e856278a9cf4af2badbcdbf73f80ffa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a plan, guideline or strategy how to create, perform or analyze an application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#in", "_:Na4c9bfc328f44f7a82b4bb6b0d500714", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne3c684285049449e9ee58f318c943f4f", "localId", "", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc1f593d31b694f8d899bab4cfafbc332", "localId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#label", "hasPrerequisite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#label", "incomplete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#label", "none", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:Nb97582dc84eb41e1aea78c6e5c7640d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "globalId", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7ce5215fd77b4391bb0faf9a289c9651", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c00958b8c7c491d82e976dea47764ee", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#comment", "A type of extension consisting of a list of name value pairs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License or Addition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element generates each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N00a4f89addf045d28864aa6380106e8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematically calculated representation of a grouping of data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Records a hyperparameter used to build the AI model contained in the AI\npackage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd25a98977037415f94236e4881c554c0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#label", "image", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72eee1dacf14634b4ccb3f926804521", "localId", "", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N2d5629b576a240eca4cbdd951a693dd9", "localId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51cddf68303a476d955b87917202ff31", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/2000/01/rdf-schema#comment", "Base domain class from which all other SPDX-3.0 domain classes derive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#in", "_:N0525f39f8ddf4826a2a11f9086af43f8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#label", "evidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd9b0e8688faa4db8bc021fe50af253fe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#label", "syntactic", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#comment", "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/summary", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a descendant of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N50272c7539ef4c818bf3bccae2d7a4e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#label", "email", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#label", "securityPolicy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncc8fbdb6574b455aa71ca75a347cd39f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build metadata related to a published package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Na242505ccf884ef29a794e57c9d3ddc8", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "globalId", "", ""] +["_:Ne71793c1d96b4398876c3fddfc0f543d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#comment", "Capture the scope of information about a specific relationship between elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N583a7c7011cd4f8383fc2b8c5f308588", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the confidentiality level of the data points contained in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the patch or source code that fixes a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdversaryModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "localId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#in", "_:Na71e0164a5d7491f82b21b32a559f2a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9512e8c2edb34dc7ad3bcac4ce63a430", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a time when a vulnerability assessment was modified", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:N6cb4c4347f154af1b5c9d61bdb1d6485", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne36b98993a6a41abaca571a82d61050c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit related to Software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9a16803acd9b4de0a606f5c7ca338d46", "localId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "globalId", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "globalId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8f515d8797c45b7894e3e707f5223fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#label", "audio", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the license under which the SPDX documentation of the Element can be\nused.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a version control system related to a software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/2000/01/rdf-schema#label", "descendantOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N01b35060833a487b8f68dd5852fb7128", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#property", "_:N6720587ff9a14662ba139a3cc04633d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` archive expands out as an artifact described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#label", "device", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5cdabdb752694f1c9a65db2083a57b66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6383d37e157d4dffb5f82a27d885c7b8", "localId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f1d4556eef644b9976392b54821e832", "localId", "", ""] +["_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "globalId", "", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the issue tracker for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3d49f1697b79484bb086d05ff0857eec", "localId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to related security information of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#comment", "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact is in active development and is not considered ready for formal support from the supplier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/2000/01/rdf-schema#label", "specification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfe7bb70385ba4334afb3dd58e4476443", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575fe651e76242bf8d3db482154b8fae", "localId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a License or an OrLaterOperator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the mailing list used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N15f27dd5aa464b16b06fd5927807179d", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Software profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5facf933623c4898a775e670cb057eef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#label", "md2", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#label", "modifiedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N88d076d5560e44378fc63f2196d3e9be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb9bb8e59941d436cb193d8d8ecd38cce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The software is not affected because the vulnerable component is not in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na7d9beb4671848ceafe78da042cf29b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an artifact containing the sources for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element provides low level control over a device's hardware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N9539a3aa8f2640ccbf5e3147b95d0acd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#label", "buildSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2caaec60ce124c8091e058eea48622ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["http://spdx.invalid./AbstractClass", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N96aafef3616e46f882877b2a7e11b757", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specified the time and date when a vulnerability was withdrawn.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2c94076e809942598a2c483d17eddfc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N95a2e8e0514048c496ba86d6678afb52", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N750e6ba1e1744f44956807fd65a5a4f7", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne55baec5fd904832ad3e305685422c87", "localId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf4e6c1ca88814f8983b689a6d618c839", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#label", "securityThreatModel", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides additional purpose information of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Na075cb0c74ec4575aa5a2c4301d28902", "localId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Nfea77563e3c34609b220695df9edc63c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4b172a1a115b4973a390eec846d3cadb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the byte range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available and can be downloaded directly.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#label", "extension", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/percentile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeletedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Na183d066b46d4b6e86d08b078d501e3d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:Ne63e0f50816b4addb79d58c16a81bee3", "localId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N90f6c4f3b60f4279b4188594f640b568", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the value of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies when the Element was originally created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na8d8ac54c0434708b78fe73a4d8e0660", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssociatedVulnerability", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if any sensitive personal information is present in the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N21bd6927f63f42d79efcc4dad7881e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been tested on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne30781691aca482680ffd9bbd2045c91", "localId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#comment", "The result of applying a hash algorithm to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1807e7da3dc42d8921080afa2df652f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#comment", "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N53e150822c694617a126e0d67cfe88d2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Extension profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N20c73971e3d9412097f90918b0fbd9d0", "localId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N5bfd54b8c91b4551a09ef347685af79e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an SSVC assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0e2779bcf1bd430f8f30fa6286429aa8", "localId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N18770e9733c8452f9533b746b1378584", "localId", "", ""] +["_:Neb7d9e3129e841ffba55cfcffa695a61", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a export control assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N1fa9bc1c7b534e18a5a523e72f951ec4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describes the invocation entrypoint of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#label", "scrapingScript", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the AI profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "globalId", "", ""] +["_:Nfbb90564d62a49c99f3ad124bf572c0a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N907869d713e3425588796c37fb9c49c1", "localId", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N8aeda8c772e348afb93afc3dc5457355", "localId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N746b944c68bf4bf39a5cdc3bf1afbba1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0358c2cacfaf495e9338bfa0ec064165", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb30a287d827e4316be15597c73c84fef", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ecbea142a87482db61924a78444a2e7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb09aae7f35a946528a44d9a113f868cb", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6383d37e157d4dffb5f82a27d885c7b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N388a67e4decf423d92132d6f8ca8791d", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N604da09912b74a828b98bb6b28fbf0a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time when a vulnerability was published.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/2000/01/rdf-schema#comment", "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#label", "hasSpecification", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the type of the model used in the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when someone reviews the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2aad1aae2d3f47e8b136b6be47eab335", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasConcludedLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#label", "adler32", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0358c2cacfaf495e9338bfa0ec064165", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the software support channel or other support information for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a single file (default).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N349791578bd441d7b8f76b4673275235", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "globalId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of the software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "localId", "", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N476942db27384f75af2da9e29db94014", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software library.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4e66507395a34b13854c4b51db14e6c1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92aedbc611024e52983c2e9da6fdb503", "localId", "", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#label", "hasEvidence", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "localId", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the type of an SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N6d2410ca374f432183cea69b81c161ec", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd498732042494722ac01f812b9752e13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N056b619290c944b1b9efec2e986869b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#label", "support", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0d74c19737464f18adb7fb9e70490836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a published list of releases for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#label", "hasOutput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/domain", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f0b2a4ea3614cf4a1d12c296f86812e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#comment", "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N093bbb61d9594baa8b978ad303aad6af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4ad7470591274ec4b6e670f8a9eb7616", "localId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc8699aa0f544965affe9ba57e69fa78", "localId", "", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7265cf39508f4d7d8064b01c6fc7af91", "localId", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N56bea2883781491d89c9330a875e5e7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:Nd5b0cc3893294e8b9a546e75d437ff15", "localId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8c4178586ccf4f6aac7bc77998ce8216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N01a7ef65b90c4cf2a2fd910705d3bb53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "A mathematical algorithm that maps data of arbitrary size to a bit string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Naf98619f104747d192028a17f0ecd8bb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is modified by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasDataFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24390832561247ea9edbcfeca24f67aa", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N702ebaf549e846d0bb51a54e7a52860e", "localId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:N9e907f1b2a0a4dbfa462bb2801f85a99", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#property", "_:N7fc15c5a65f84366ada3c30ddb250517", "localId", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndc1cec228c454b62a5ab7eee0eab8995", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "globalId", "", ""] +["_:Nbfc53449413c4390876a7291e180ba07", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0786949c6ae949ca971b0870a39e5628", "localId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the results of general safety risk assessment of the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd3441f77ea64600b8f311e26c76a5cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the tooling that was used during the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N43b644328d464248beda66a9dc1b24f0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a social media channel for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N02216a682b174628b5883d37733d43f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ef089c77eb34b33a0632d3a68232d5b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#label", "categorical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#label", "inlineMitigationsAlreadyExist", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Records any relevant background information or additional comments\nabout the origin of the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A distinct article or unit within the digital domain.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N795110769b4a40288bd376f538317c4c", "localId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#comment", "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "globalId", "", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N41bfdb0844834a9296a04a2b771b30d7", "localId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/license", "https://spdx.org/licenses/Community-Spec-1.0.html", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 2.0 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N4c0f1c4516d84ccca992781aa73748b0", "localId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N82d87d74437f447f8c64422e7639002d", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0039cd20d11f4e1eb92b14040fe9d2ab", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N72025856b2c04aedb921459d28b8f3a5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "componentAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc6682f937eb14a9faa960932d60969c2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N6bf989b95c5e498e988052131700d5e6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/2000/01/rdf-schema#label", "sha1", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#label", "amendedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3c78df17f57a45d7b66ef27d1d0b60be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies until when the artifact can be used before its usage needs to be\nreassessed.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b5a3ed5442042b6b9ecf776b63ca010", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N4ad7470591274ec4b6e670f8a9eb7616", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "globalId", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#comment", "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an exploit catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the primary purpose of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N617bdae809f549f9b84e4c71b02ccd33", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ncf95e811579f435d8190022c27ddc51e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf29c3df33a36484ea8218e1467f21b77", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/severity", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the biases that the dataset is known to encompass.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0dd20b85a99e41b2b7b8481f3a0553a4", "localId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1288fc1d432c42e3a6691ec85b15b7f5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#comment", "The product is not affected because the code underlying the vulnerability is not present in the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N33cee511d45243669ca60bd0a0f4a3a9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N06c2ea1f5832433aa8d0e7612d230380", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92311b1b08cb437aaea5bc0c25bf4b50", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/import", "globalId", "", ""] +["_:N9af46730ac5e4549a37713d578ca2c0c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#comment", "A short description of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N81e9711becff48eaa08e25e5b6fea9c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N96c77573f7d244af98fbb31a9a921415", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the VEX justification type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference number that can be used to understand how to parse and\ninterpret an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N88fb6b952c0b4497afed840a2b36b7c3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional license information related to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a quality assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N81a6a212754843d3aba0e84f43791e7f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/2000/01/rdf-schema#label", "graph", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N218b2297f9704d99bf1b9e818945ce5c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:Nc07374747c9448faae0e1e2622db1d7d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#comment", "Agent represents anything with the potential to act on a system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#label", "serious", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to funding information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6ecbea142a87482db61924a78444a2e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 7.0 - 8.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N8d9932eb554044d69adb3585d42ac4a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6455bf8bc0534e40a8203b71244036bd", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/2000/01/rdf-schema#label", "library", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:Nb8bc8bf36ce34c4088051dc1208e1af9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:N2bf58c59d4e345bd92c2c66da13d5577", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/2000/01/rdf-schema#label", "reportedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#in", "_:Neac9dbcbb01c41b9aa58fa84eeec98d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#label", "analyzed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#label", "packagedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#label", "delegatedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#in", "_:N464f3e9fe6dc411b88a93fb1c9045967", "localId", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "globalId", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element contains each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N5fdc75b020564411a5c638c9aa7169b1", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfb33f9dd13074a5393c69c370e2cb4f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/ns/shacl#property", "_:N1183c95846404f8686047bb384b1fbb5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N164dbad8168a495a98820f4a532bad8c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "hasDistributionArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#label", "packageUrl", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#label", "clear", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N33e17640748a455091e7f615156e4be0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/2000/01/rdf-schema#label", "buildMeta", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N026b410848804fea9d8c504126844111", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N92fcf21ac8a64f358f68624b0432e712", "localId", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N832cd397b3524a16ae0417e09ab5b40e", "localId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A License participating in an 'or later' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/references", "https://spdx.dev/specifications/", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "globalId", "", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1bc2f7dd56904c86b46e121aeb8cb636", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/2000/01/rdf-schema#label", "track", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#label", "altWebPage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/2000/01/rdf-schema#label", "timestamp", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2a5d53abe06a466584993d22f4218cac", "localId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N30178f0a784c43079551a63b841da0ba", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N93bfbd075cd04cd190f57aa7a8d728c1", "localId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N43b644328d464248beda66a9dc1b24f0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N95c3ead21e6e4ecd95af23263451b25e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a risk assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:N401bb3f0ba1b4f84b7db752de9c9ecda", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software manifest.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "exploitCreatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#comment", "A group of people who work together in an organized way for a shared purpose.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["_:N7265cf39508f4d7d8064b01c6fc7af91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9ef78d5edabf4efbb280aa669f60517d", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N06c2ea1f5832433aa8d0e7612d230380", "localId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is amended by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92311b1b08cb437aaea5bc0c25bf4b50", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02429c72607846619a4d3bc4f9e9e971", "localId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neea78b34b53645d9b977d4dafb032fbb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N497a6b43b7584ce9a497817fce159210", "localId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2f0b2a4ea3614cf4a1d12c296f86812e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N4570847561a247b190684fe248fa523f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the beginning of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N69eefd6c115c4499be60a56a329082ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#comment", "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#in", "_:Nc68de2290dec4037b97bb40ca8c0adb1", "localId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne09d8237f43b483293ea5b23d9d378c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5f901838dbd947f0aef2c3a4486db889", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e9938cc2a3c4da9abce340cca712edd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a purchase order for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "simpleLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative web page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0dd20b85a99e41b2b7b8481f3a0553a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["_:Nabf8267e85fe497f80f96eaecb2a8ecc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7381b5af92324165b38a2ef399a3d683", "localId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:Nbeb8b7d55cf74321942fb0ae3da5add9", "localId", "", ""] +["_:N45733e14e2a1496b8dd8e675ad450ace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Any other units of energy measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3989f3d5c22c4cd2b18614b38e4fd864", "localId", "", ""] +["_:Nd498732042494722ac01f812b9752e13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "globalId", "", ""] +["_:N28454dc7d61d47bd9f19e037f20819ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#in", "_:Ndba01dc226ee49c3be1b757c1787cb43", "localId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "hasMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#label", "usesTool", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Ne0351ee38a2940df9a643908f3c04c78", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the preprocessing steps that were applied to the raw data to create the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5facf933623c4898a775e670cb057eef", "localId", "", ""] +["_:N93517a28b24343c8a9247206129a9684", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c52044e0e91489480dcbc1b1bb7e350", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N47bf567d302048459f09bc6f9e280b5e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Extension characterization of some aspect of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0e964c633594ba097b6a750a6ade092", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N89b556da50e44c328fa4742ba07ad842", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/ns/shacl#property", "_:Ne3e78235566445608978be9329e74cc2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Timestamp of impact statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:Nd72c256eb46a430db7454aad221ffc59", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/2000/01/rdf-schema#label", "amber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nb757eb766bcf484dab7fcc8640520f26", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the algorithm used for calculating the hash value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#label", "eolNotice", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nf016298471ac4dc394002a7ecea87e4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SSVC decision type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf07f4220a2fd47bea00636caef099680", "localId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is the evidence that a specification or requirement has been fulfilled.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/2000/01/rdf-schema#comment", "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "globalId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5546070c54224ce482c3cbd8b3c5d898", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Other exploit catalogs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/2000/01/rdf-schema#label", "hasVariant", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#label", "productMetadata", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9919f57d67bd4992ac37a637007f56b9", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/to", "http://www.w3.org/2000/01/rdf-schema#comment", "References an Element on the right-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset can be shared within a community of peers and partners.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespace", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#in", "_:Nac7de1144825418b96a3c43ff6d678a6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N97f27abc23b9427f8445614385fdd5e7", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/2000/01/rdf-schema#label", "generates", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/limitation", "globalId", "", ""] +["_:Ne74d9ee0343b4b299f81fa823f3baa12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/2000/01/rdf-schema#comment", "Dataset may be distributed freely, without restriction.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#label", "hasTestCase", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#comment", "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an indication of where to retrieve an external Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N0725b77584894b4c82b93fc68df0a45d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "localId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/2000/01/rdf-schema#label", "limitedSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2000/01/rdf-schema#label", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "The version of the SPDX License List used in the license expression.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4e66507395a34b13854c4b51db14e6c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3e5fc4328f364305a1c66fdd7534c881", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/2000/01/rdf-schema#label", "expandsTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9dd1290b25404776b84fe5a85801893f", "localId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#comment", "A substitute for a URI.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/probability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#in", "_:Nb29082bbf3a54faf833061815ecea3cd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "globalId", "", ""] +["_:N11d2469065ae40ba876541501b6ad701", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/2000/01/rdf-schema#label", "securityAdvisory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#comment", "An element of hardware and/or software utilized to carry out a particular function.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "globalId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N62cbeb231bc544a7ac8aab5e8217d804", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a map of a property names to a values.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#label", "sensor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/2000/01/rdf-schema#label", "hasTest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2f9a893241114b04a570a074eb5e90fd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of a content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8e015961b7e9410e98c4287ad1a58ebb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc42797a854d4008a99f6062c2875fc3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Dataset profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4feeea92771943cf9cdc1cb0e5a19eb8", "localId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#label", "releaseNotes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#label", "yes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "localId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne2ff293b6d084635bd69a6ad308a4ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#comment", "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "globalId", "", ""] +["_:N8535416071ef432187b8a91ab3a7e437", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists only of numeric entries.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#label", "cve", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Ncc31c01eeda0480ea00ea96b0f811739", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the session in which a build is invoked.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasDynamicLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "globalId", "", ""] +["_:N19bf11d3eb754e10bd676b9b7780555e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf016298471ac4dc394002a7ecea87e4a", "localId", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#label", "registration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd34755ea58bd4430b6e06edfe49d3836", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/completeness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#label", "design", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3484c741d91a4723b5c7f52d12122e53", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a License, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N45d29e6a8f964d629bcfd38e8a2812df", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#label", "publishedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N3d0909f693c34cacbd26067f25a3cd4c", "localId", "", ""] +["_:N6d2410ca374f432183cea69b81c161ec", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability has been fixed by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is used to install software on disk.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a generic key-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX version 2.X compatible verification method for software packages.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/2000/01/rdf-schema#label", "describes", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0207d8bc435b4fcf933b378f5d74d81c", "localId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["_:Nfe7bb70385ba4334afb3dd58e4476443", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#label", "deviceDriver", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nef779dc58efd41708d2dd810a1c22861", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1e65c28f50ca472e8d766dd913f3ecc1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Lite profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#label", "operatingSystem", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N89b556da50e44c328fa4742ba07ad842", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["_:N464f3e9fe6dc411b88a93fb1c9045967", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N21bd6927f63f42d79efcc4dad7881e53", "localId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#in", "_:Nc37338dfb4174f0492ed890f475cafc1", "localId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N51a6abe36bbb4a9a8cce23555b0fa72a", "localId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/extension", "globalId", "", ""] +["_:Nd6035645b90646908c1881b4d968ce2e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N90f6c4f3b60f4279b4188594f640b568", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2f9a893241114b04a570a074eb5e90fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "globalId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N168ff94489204ce2b3d2bcc2e291d420", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N41bfdb0844834a9296a04a2b771b30d7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#label", "executable", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N11cc93477738430e89e745f56c83f147", "localId", "", ""] +["_:Neba2498dd09a4417a0ad37b9ab3e5e69", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N64aa778e8d414bb58cc29d8a040aa5b5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf679cce397cb41148e4dbc0de457788b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a privacy assessment for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e65c28f50ca472e8d766dd913f3ecc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has had an exploit created against it by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:N624418f1db494f7ebe03fa364190d21d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/2000/01/rdf-schema#label", "green", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an operating system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/2000/01/rdf-schema#comment", "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N042b9bb4151c4219ae35ea4665b1cb85", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8242d57d83034d40a15ec0013cc69b62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:N645cfb9d3c334cc1a3175307175364c7", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/title", "System Package Data Exchange (SPDX) Ontology", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#label", "configures", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#comment", "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/2000/01/rdf-schema#comment", "An assertion made in relation to one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "A string in the license expression format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N4c0f1c4516d84ccca992781aa73748b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N765d53a52f60469db1405497bbdeb524", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "globalId", "", ""] +["_:N9a16803acd9b4de0a606f5c7ca338d46", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb41bc224042f48e3b42c657cad654e89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/2000/01/rdf-schema#label", "mailingList", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/2000/01/rdf-schema#label", "falcon", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/2000/01/rdf-schema#comment", "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#in", "_:N45d29e6a8f964d629bcfd38e8a2812df", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc3284b65a24ff69bef8bb7c2950f40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N51cddf68303a476d955b87917202ff31", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#label", "kilowattHour", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na2ab1463e071402b941a055cf25405d0", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ne36b98993a6a41abaca571a82d61050c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "globalId", "", ""] +["_:Ndf398217fce6424ca2d23712e71263fb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09d41b24e37944889b085f3a5dec27a2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#label", "archive", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Ontology", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#property", "_:N6faa0ec40c2944cc96365e0200f91bc7", "localId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#label", "filesystemImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne25f494d3fbc45bfae592617345de5db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7135267418f04789a477e78eef34865e", "localId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "globalId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies from where or whom the Element originally came.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of presence or absence.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8737dc2b1bd6408b852d2324c6ce404e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N02637b6a678241cda6ec95b576156ac2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5234c2f9e59a42d9867dd1846c82c769", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://www.w3.org/2002/07/owl#versionIRI", "https://spdx.org/rdf/3.0.1/terms/", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/2000/01/rdf-schema#label", "firmware", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd73767485264c33bc64cc9b42c99b88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N83380edfda0143559b20b6f86b17c17a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Na075cb0c74ec4575aa5a2c4301d28902", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether a license or additional text identifier has been marked as\ndeprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54383bc8be2a41518a2fb5a7b1171841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N559cf862cf484b388a29cbb3e04d2539", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#label", "patch", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the digest of the build configuration file used to\ninvoke a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to metrics related to package such as OpenSSF scorecards.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#comment", "Data points in the dataset are highly confidential and can only be shared with named recipients.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nae4f8b47fa644be6b9a1efc5c4e5a57e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31d552db951b47269f52c41b41761d5d", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/2000/01/rdf-schema#label", "numeric", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9dd1290b25404776b84fe5a85801893f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N5484226f71e247459aecae3701f31924", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N22a009d8e6fd49afa8d991cf125d3386", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/parameter", "globalId", "", ""] +["_:N135abe5aa7184697abfa5b1134f74635", "http://www.w3.org/ns/shacl#in", "_:N54383bc8be2a41518a2fb5a7b1171841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N5d88af867062488cb6e9d9d48ff41920", "localId", "", ""] +["_:N897103c5db374d44a639af1692f596b0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:N7f4ceb4220154dcc8f61793dbc8c6852", "localId", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#comment", "A license or addition that is not listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#label", "critical", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/2000/01/rdf-schema#label", "ai", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of dataset types.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit of energy consumption.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N67676f11ca184c05a0d5f6249a4b14fa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/2000/01/rdf-schema#label", "sha384", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/2000/01/rdf-schema#label", "hasInput", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "http://www.w3.org/2000/01/rdf-schema#label", "urlScheme", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0e964c633594ba097b6a750a6ade092", "localId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/2000/01/rdf-schema#label", "review", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N353f7075a1fe48b3b7b7af086e4aa2ed", "localId", "", ""] +["_:Ne75a3e4d4bce46dfbf2794c7bec43888", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8e015961b7e9410e98c4287ad1a58ebb", "localId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/2000/01/rdf-schema#label", "deployed", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/2000/01/rdf-schema#comment", "A license exception that is listed on the SPDX Exceptions list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd81e7e097668428d8d37dd7470a77974", "localId", "", ""] +["_:Nbed0dcc3c778406db4d3f6eca8c4c177", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc27cd84531894867a3501b47035a2c04", "localId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents a runtime environment.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#label", "bom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/2000/01/rdf-schema#comment", "The second-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#label", "structured", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:Ndd62961c42b449c7999ac09e91c55bb2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "staticAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne75a3e4d4bce46dfbf2794c7bec43888", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4570847561a247b190684fe248fa523f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N04c0f4b0b7d94bb980f1ae6d828c54eb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/2000/01/rdf-schema#label", "funding", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#property", "_:N1e10b72106c748bf8326627b02c07313", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/2000/01/rdf-schema#comment", "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to additional product metadata such as reference within organization's product catalog.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4b172a1a115b4973a390eec846d3cadb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne09d8237f43b483293ea5b23d9d378c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "globalId", "", ""] +["_:N2ad096761e3044fcb326834ae006af13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne71793c1d96b4398876c3fddfc0f543d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1f23fee13584cbeb79e3baa0c6b05b2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "globalId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N0e2779bcf1bd430f8f30fa6286429aa8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes if a given file is a directory or non-directory kind of file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#property", "_:N7136c79627a74cbabf5f99227a8c06d3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/2000/01/rdf-schema#label", "securityFix", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N35f6a1c62bd343da8432836cbbbd8d0e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8e9938cc2a3c4da9abce340cca712edd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf34b3b1798cd4b95ad7460d818440421", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide an enumerated set of lifecycle phases that can provide context to relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityExploitabilityAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "The third-highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N331685f17119458e9f8d03e1032a587d", "localId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N93517a28b24343c8a9247206129a9684", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes potentially noisy elements of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9600326f07e84fd0b5702dbba8fb5692", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N012999398659462aa7d4d45cfea4cd49", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nefba3a71506d41cfabbc865580be12f7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb09aae7f35a946528a44d9a113f868cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/2000/01/rdf-schema#comment", "Kilowatt-hour.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the completeness of relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#in", "_:Ne25f494d3fbc45bfae592617345de5db", "localId", "", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "globalId", "", ""] +["_:Nf29c3df33a36484ea8218e1467f21b77", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N5a72932413d2413b80569a5fb2966e41", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N84fbf505fc5b4942809840c744afbc50", "localId", "", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "globalId", "", ""] +["_:N9ef78d5edabf4efbb280aa669f60517d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na084b549fa4a46ef9c69e235fea6cfdf", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/value", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasProvidedDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:N642c1242529241e184296a5a0b57d7d5", "localId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "no assertion about the type of support is made. This is considered the default if no other support type is used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3e856278a9cf4af2badbcdbf73f80ffa", "http://www.w3.org/ns/shacl#in", "_:N473befceadbe42d0bd9069dd0ce4699b", "localId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5aebbc4f9aa74a9ca8a930203a1284f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f8e43d5c7b417bb04959276983ea1c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/abstract", "This ontology defines the terms and relationships used in the SPDX specification to describe system packages", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3e5fc4328f364305a1c66fdd7534c881", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "localId", "", ""] +["_:N7f32ec55b71f438fa081e1ea71e23e12", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N7136c79627a74cbabf5f99227a8c06d3", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#label", "no", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#comment", "The field describes the availability of a dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N53d06bdaf9464b0fbd454088aee08786", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#label", "ancestorOf", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#label", "swhid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", "http://www.w3.org/2000/01/rdf-schema#label", "dependsOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "serializedInArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#label", "text", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all VEX relationships", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7f4ceb4220154dcc8f61793dbc8c6852", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "globalId", "", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing a parameter used in an instance of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N4dc4509276114e519a1e36d2339cd154", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "globalId", "", ""] +["_:Na5a947182f8f431690f104df52b37ae4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a machine learning or artificial intelligence model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Security profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an example for the `from` Element (`from` hasExample `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "http://www.w3.org/ns/shacl#property", "_:N1904cd4ccd84473a8555c9f0885877ef", "localId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nf5c2326720d14f579097f3ab47e8c762", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na34b9857d3494dd3bc57ea0aac372489", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any object that stores content on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/value", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Ncaa9a447e341490894b8ea06dc485a0c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#in", "_:Nbc8ad111179e4d28aeca12d049d01869", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:Nd507d892ccf546c68470c2ad1de481bc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "localId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was built.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/2000/01/rdf-schema#label", "manifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/2000/01/rdf-schema#label", "securityOther", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#in", "_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#comment", "data is video based, such as a collection of movie clips featuring Tom Hanks.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/2000/01/rdf-schema#label", "fixedIn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 9.0 - 10.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N39208ce6d6704289bce5a33c713589ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N9af46730ac5e4549a37713d578ca2c0c", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2aad1aae2d3f47e8b136b6be47eab335", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81e9711becff48eaa08e25e5b6fea9c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N4252a866980f4a839fad017a197dc8af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "localId", "", ""] +["_:N402019128a2449e3b5be3f04ec1f62f4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e67e553547e4413a6ba103a34e16d88", "localId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "localId", "", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5dc7ad7b328945158bb2c61ac16e194c", "localId", "", ""] +["_:N22a009d8e6fd49afa8d991cf125d3386", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/2000/01/rdf-schema#label", "blake2b512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of the given dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6e67e553547e4413a6ba103a34e16d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the unit in which energy is measured.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "Low/no risk is posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb3d9d9553ea04f749108d2000dfc3953", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Ncd772398fef24acfb9c377355aaa70e4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2bf58c59d4e345bd92c2c66da13d5577", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/prefix", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/created", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/2000/01/rdf-schema#comment", "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#label", "cpe22", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/2000/01/rdf-schema#comment", "The class that helps note down the quantity of energy consumption and the unit\nused for measurement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/ns/shacl#property", "_:N6999f1ba66054cb9a6683482a6046870", "localId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/key", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nf9c56978821e4d65b3c9e6089e72244f", "localId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N64aa778e8d414bb58cc29d8a040aa5b5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N49ef6f7a94564ae0956279bb86096fa0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N722b841e0cc144789cdd7e01a5a50ea9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#label", "blake3", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#label", "certificationReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:N6841333db1c2440083b2a1e012968a62", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#label", "securityPenTestReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#label", "runtime", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/2000/01/rdf-schema#comment", "data is a collection of images such as pictures of animals.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/parameter", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5dc3284b65a24ff69bef8bb7c2950f40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/contentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the content type of an Element or a Property.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2dc39d16ee9f4be191ad3506bae0c216", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nbb4d130582c44c00bdc80ffc03d8dde6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nf253c5f3fc0f40728e3b713da72f534f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:N3989f3d5c22c4cd2b18614b38e4fd864", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N8535416071ef432187b8a91ab3a7e437", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "http://www.w3.org/2000/01/rdf-schema#comment", "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/import", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an ExternalMap of Element identifiers.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "http://www.w3.org/2000/01/rdf-schema#comment", "Categories of confidentiality level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "globalId", "", ""] +["_:N49ef6f7a94564ae0956279bb86096fa0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neb7d9e3129e841ffba55cfcffa695a61", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "globalId", "", ""] +["_:N0d74c19737464f18adb7fb9e70490836", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5ff1d1055e34b2cb95f75f6c7657265", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the expanded Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99c1538993cb4cc0a17aa9ebc04745e5", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3d0253c9ab6d43bd870cafd49a1aa17e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/2000/01/rdf-schema#label", "releaseHistory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "globalId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nf208bbcafacb4617ad8ce48ed0c5320a", "localId", "", ""] +["_:Nf9e398de7c23460c95e7fec63c92065d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N844378f645c04baba1e77ba4c91a005c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "localId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#pattern", "^[^\\/]+\\/[^\\/]+$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#label", "kev", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/ns/shacl#property", "_:Na4c9815bb1c74163aad85a1b13e04f13", "localId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element represents software that controls hardware devices.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#label", "npm", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N907869d713e3425588796c37fb9c49c1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N2ef089c77eb34b33a0632d3a68232d5b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "globalId", "", ""] +["_:Nbd3441f77ea64600b8f311e26c76a5cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a mechanism to update the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/2000/01/rdf-schema#comment", "Records if sensitive personal information is used during model training or\ncould be used during the inference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes methods that can be used to explain the results from the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/comment", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide consumers with comments by the creator of the Element about the\nElement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N617bdae809f549f9b84e4c71b02ccd33", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne1daaa3e8de142d9b4b0399fc62bc270", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a resource outside the scope of SPDX-3.0 content related to an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc6682f937eb14a9faa960932d60969c2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies whether an additional text identifier has been marked as deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element doesn't fit into any of the other categories.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1dafd5bc3b6040e490dfb6830c66802d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc4c2447375154c088326785e5201d90c", "localId", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#in", "_:N0725b77584894b4c82b93fc68df0a45d", "localId", "", ""] +["_:N3ae1b4b606c54455af1a19bb1a2bfbb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d94ac10bc5f422ca55e9aa451328fd1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nd696d0bece9045cfa929993fc189dab6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#comment", "An Element an annotator has made an assertion about.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "http://www.w3.org/2000/01/rdf-schema#label", "requirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7c577594e1734b4ebabc9b18761d5162", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N99de8e9db44844b5a9d11b197386f3d0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/ns/shacl#property", "_:Nacf93e2dadec4cf5a6eddab055d67599", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "http://www.w3.org/2000/01/rdf-schema#comment", "Availability of dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#label", "hasDeclaredLicense", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "data is of a type not included in this list.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates absence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N9b073a51b7934d96882a3d7b2516e6ee", "localId", "", ""] +["_:N993312a33ff8406aaa62fb12f728a245", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd74f1a1f51db45fc8a121a72f2810ce9", "localId", "", ""] +["_:Nd348352c7de54765832cc19f3d43300c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8737dc2b1bd6408b852d2324c6ce404e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/2000/01/rdf-schema#label", "hasRequirement", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nc37338dfb4174f0492ed890f475cafc1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "globalId", "", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildType", "http://www.w3.org/2000/01/rdf-schema#comment", "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes one a profile which the creator of this ElementCollection intends to\nconform to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nc36cca07a48048b18bee65bd265e3473", "localId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference build system used to create or publish the package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6bb457a45b8149f09614fbba0dde597c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the release notes for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1931b6c2fa1e43769bda7a922ee5d431", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne0ead3de0c1842e8803711c778d3de8f", "localId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "globalId", "", ""] +["_:Nc0cbe94b1b9f4c518494e91bc175e759", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nd72eee1dacf14634b4ccb3f926804521", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "globalId", "", ""] +["_:N804dd6908e264d10be7ab47179d84223", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when there is a security related identifier of unspecified type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements describing a single package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/locator", "globalId", "", ""] +["_:N4daef40acaac487baa5fb20c0fd627ac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/description", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's build phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na8d8ac54c0434708b78fe73a4d8e0660", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "A tuple of two positive integers that define a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/statement", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/2000/01/rdf-schema#comment", "This property is used to denote the root Element(s) of a tree of elements contained in a BOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:Ndc9ca13ca7e045a890f1b0f580371051", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/2000/01/rdf-schema#label", "cwe", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N4a1fc3bf9bc949a0b13c835bdca0bddb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/percentile", "http://www.w3.org/2000/01/rdf-schema#comment", "The percentile of the current probability score.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b30e49ee021458b83b41fb0202c4043", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N353f7075a1fe48b3b7b7af086e4aa2ed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", "http://www.w3.org/2000/01/rdf-schema#label", "contains", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the time at which a build stops.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N497a6b43b7584ce9a497817fce159210", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["_:N3d49f1697b79484bb086d05ff0857eec", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nef0b82c6d2ef4a5c8dbd141212401b13", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "http://www.w3.org/2000/01/rdf-schema#label", "software", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/decisionType", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ncc8fbdb6574b455aa71ca75a347cd39f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/2000/01/rdf-schema#label", "coordinatedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N1183c95846404f8686047bb384b1fbb5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3150b51898a54a30b8c523d53721610a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N765d53a52f60469db1405497bbdeb524", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N45733e14e2a1496b8dd8e675ad450ace", "localId", "", ""] +["_:N0207d8bc435b4fcf933b378f5d74d81c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfbb90564d62a49c99f3ad124bf572c0a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is configuration data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3aae1ae126af41909469c96ead6b6227", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/2000/01/rdf-schema#label", "componentNotPresent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/2000/01/rdf-schema#comment", "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N9512e8c2edb34dc7ad3bcac4ce63a430", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9600326f07e84fd0b5702dbba8fb5692", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", "http://www.w3.org/2000/01/rdf-schema#comment", "An entity that is authorized to issue identification credentials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N54a4d666657c40289b7665b9f8fa4d2c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ae792b6cfbc44649f0ea01eb18a0fb3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/2000/01/rdf-schema#label", "hasAssessmentFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2523b388c8904f2885050ee00d15f281", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an independently reproducible mechanism that permits verification of a specific Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndf398217fce6424ca2d23712e71263fb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#comment", "A software agent.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "http://www.w3.org/2000/01/rdf-schema#comment", "A value used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#property", "_:Na0207e8ebb3546d494a226941f26b82a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/2000/01/rdf-schema#comment", "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N96c77573f7d244af98fbb31a9a921415", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the safety risk level.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#comment", "[Kyber](https://pq-crystals.org/kyber/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nbd73767485264c33bc64cc9b42c99b88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na93b9a0680a145d7ad7614c15215165f", "localId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "globalId", "", ""] +["_:N01b35060833a487b8f68dd5852fb7128", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8d9932eb554044d69adb3585d42ac4a4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nc36cca07a48048b18bee65bd265e3473", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["_:Nf5ff1d1055e34b2cb95f75f6c7657265", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "globalId", "", ""] +["_:Nd74f1a1f51db45fc8a121a72f2810ce9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbd5d22a16c594086a7dab4ce2199d3be", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/metric", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N575a40dcf9d2470382a3cb67027db887", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the version of a VEX statement.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License where the SPDX data creator determines that no\nlicense is present.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a certain part of a file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Build profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Ne0351ee38a2940df9a643908f3c04c78", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "globalId", "", ""] +["_:N5d7b7ab80ba94da78154e51e39f4b55d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a License author's preferred text to indicate that a file is covered\nby the License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "globalId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc5aa8a1325b0473daf3d15821b492d34", "localId", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N19caf49b458948aab96db18d18a37807", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#comment", "The affected code is not reachable through the execution of the code, including non-anticipated states of the product.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3d0909f693c34cacbd26067f25a3cd4c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Na69fc7a1c2654979ada4d85b1717874b", "localId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N9b28133398a64d5eb219290008f464a6", "localId", "", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N303a78ff780a48fdbcb374ff43820d99", "localId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2000/01/rdf-schema#comment", "An Organization representing the SPDX Project.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N11cc93477738430e89e745f56c83f147", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["_:Nb0e55a7a3f404b718aa14c0523f748fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "globalId", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N60b7e732109b4d57a2174a1793e81730", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/2000/01/rdf-schema#label", "endOfSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:Na063ca2df3034db0bf1b8b898aa3a404", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/fileKind", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/2000/01/rdf-schema#label", "clickthrough", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "No assertion can be made about the completeness of the relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locationHint", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", "http://www.w3.org/2000/01/rdf-schema#comment", "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#in", "_:N993312a33ff8406aaa62fb12f728a245", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software framework.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N3aae1ae126af41909469c96ead6b6227", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/2000/01/rdf-schema#label", "metrics", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Nf71e260bcc9940d2b8cb0fdf962a1454", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/2000/01/rdf-schema#label", "patchedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:N26e5d106c3b9457fa387974ed45155a7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nf9c56978821e4d65b3c9e6089e72244f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N4d64fe8feb16494b9674f49e196cdb1d", "localId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N01a7ef65b90c4cf2a2fd910705d3bb53", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N2dc39d16ee9f4be191ad3506bae0c216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#nonNegativeInteger", "globalId", "", ""] +["_:N10776ad90ad94042bfd598e68f215ed9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", "globalId", "", ""] +["_:N6a47af8674814d9a92314ce9c053556a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nf07f4220a2fd47bea00636caef099680", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "globalId", "", ""] +["_:Ndd62961c42b449c7999ac09e91c55bb2", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/ns/shacl#property", "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nbc9ecbd1db234efabb062c64c5b1582e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd348352c7de54765832cc19f3d43300c", "localId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is available from the additional supplier described by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A LicenseAddition participating in a 'with addition' model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/ns/shacl#property", "_:N19ffa456cd9a4738ae5406b9443c8eb1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", "http://www.w3.org/2000/01/rdf-schema#comment", "Conveys information about how VEX status was determined.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been trained on the `to` Element(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N69cc60cd211d4ac69d884813fa143fc7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the different kinds of SPDX file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#label", "application", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies who or what created the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N67676f11ca184c05a0d5f6249a4b14fa", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/exploited", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N702ebaf549e846d0bb51a54e7a52860e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb076c63c99944bff81f8ce7e21fbf841", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/element", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to one or more Elements that are part of an ElementCollection.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The relative file name of a file to be excluded from the\n`PackageVerificationCode`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#in", "_:Nc505579387424472888c03cc153dd107", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/ns/shacl#property", "_:Nbd4cabc421bb46b3977fcf236c7870ff", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a static analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#label", "container", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N09f51f6b10be4948ac38d31ce896aced", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N670b02a39f7e43c18d8cabf4a086ae6d", "localId", "", ""] +["_:Na084b549fa4a46ef9c69e235fea6cfdf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7d38e5ecd3ab4556b895637c8beeb598", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N4a0643790ee647d0bf9d75f3f4f80581", "localId", "", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/2000/01/rdf-schema#label", "testedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/statement", "http://www.w3.org/2000/01/rdf-schema#comment", "Commentary on an assertion that an annotator has made.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#decimal", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during the execution phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/standardName", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/homePage", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8fe0d08ca3d644c394e8af08a3875047", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/2000/01/rdf-schema#comment", "Refers to any unit of content that can be associated with a distribution of\nsoftware.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N3d0253c9ab6d43bd870cafd49a1aa17e", "localId", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:N24fab7059f894755bb21ef4ddc4d0f4f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nba7479035af442ada086c0338c451097", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#label", "hasHost", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5bfd54b8c91b4551a09ef347685af79e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N9b30e49ee021458b83b41fb0202c4043", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N10776ad90ad94042bfd598e68f215ed9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/creator", "SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/ns/shacl#property", "_:Ndb15970ce7d34e878a0a7123dad52212", "localId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "globalId", "", ""] +["_:Nd507d892ccf546c68470c2ad1de481bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N35748216664842588d1d2428d0238f7c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N012999398659462aa7d4d45cfea4cd49", "localId", "", ""] +["_:Ndb89662869e64a20938720be32e56b7b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "globalId", "", ""] +["_:Na93b9a0680a145d7ad7614c15215165f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N81a6a212754843d3aba0e84f43791e7f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N8c4178586ccf4f6aac7bc77998ce8216", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "globalId", "", ""] +["_:Na84c1e23d6e44da4b4f3fda68fe0b3e3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N9b9a98064ff244dab80a08bdd5555d88", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract ancestor class for all vulnerability assessments", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "An Individual Value for License when no assertion can be made about its actual\nvalue.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N0a1213eddeb04e2eafef770905f9f1bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na6e92abe54d446e79e8c88579ac830f2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during development phase of an element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N25996c4894e1460a8b698f0cbef34195", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N341f19d094bb4183a2db06364073f914", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "http://www.w3.org/2000/01/rdf-schema#label", "query", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N606fa8b8d1d849bc90c0d4a759ca18c6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an Artifact that can be run on a computer.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfc1ba2b198a0488b97e460730d5d8314", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfc53449413c4390876a7291e180ba07", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provide context for a relationship that occurs in the lifecycle.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N168ff94489204ce2b3d2bcc2e291d420", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N453867a1e4d041d0b9ef358011ed5898", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N88fb6b952c0b4497afed840a2b36b7c3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#comment", "The file represents a directory and all content stored in that directory.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:N4dc4509276114e519a1e36d2339cd154", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N08c151d77c034260b733a9cd4fb2db47", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4106ddc0ab0a4a51b658689625cb4bcd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the amount of energy consumption incurred by an AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/2000/01/rdf-schema#comment", "A mapping between prefixes and namespace partial URIs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N95c3ead21e6e4ecd95af23263451b25e", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Nb076c63c99944bff81f8ce7e21fbf841", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", "http://www.w3.org/2000/01/rdf-schema#comment", "Information about the relationship between two Elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Ncc31c01eeda0480ea00ea96b0f811739", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfec76341615042fa920d080bb121bd66", "localId", "", ""] +["_:N575fe651e76242bf8d3db482154b8fae", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#label", "hasStaticLink", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "globalId", "", ""] +["_:N0912149adb0b4f64bf8c3c1266d60a4a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is 0.0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "globalId", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "data is recorded from a physical sensor, such as a thermometer reading or biometric device.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/", "globalId", "", ""] +["_:N8242d57d83034d40a15ec0013cc69b62", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c2208ee7e3d40ca97119f695308f1f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/sbomType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "globalId", "", ""] +["_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:N0c71e5c699a04dd1aef8e9c6d59b9b25", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N872f874bf6a643fb922cfeb84da33004", "http://www.w3.org/ns/shacl#in", "_:N681b535a77a04528a517054508bb1c40", "localId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the instant messaging system used by the maintainer for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/2000/01/rdf-schema#label", "directory", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a CVSS version 4 assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N746b944c68bf4bf39a5cdc3bf1afbba1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb5d70b9706cb46a29801cbcb49dffef6", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf562af8defe04dbc89db49905f399a11", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "globalId", "", ""] +["_:N7135267418f04789a477e78eef34865e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N54a4d666657c40289b7665b9f8fa4d2c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "A license that is listed on the SPDX License List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbd4cabc421bb46b3977fcf236c7870ff", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:N476942db27384f75af2da9e29db94014", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7381b5af92324165b38a2ef399a3d683", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6fa5fcf79af41aca71f798a61820519", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:N7ea991bcafe746f8ae7f965a4039cbc4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb3d9d9553ea04f749108d2000dfc3953", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "globalId", "", ""] +["_:N750e6ba1e1744f44956807fd65a5a4f7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a data package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N09f51f6b10be4948ac38d31ce896aced", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/2000/01/rdf-schema#label", "complete", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N02637b6a678241cda6ec95b576156ac2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N6e64ceb369f04614bd3449d6d9bea0d1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne16b834cedfa4b8db4d362a45561064d", "localId", "", ""] +["_:N670b02a39f7e43c18d8cabf4a086ae6d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4a71e77d78634c69959e3e011db657c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:N7c08903e22d24c6f9559062e74c8c807", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#label", "module", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/key", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element refers to a chipset, processor, or electronic board.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/2000/01/rdf-schema#comment", "CISA's Known Exploited Vulnerability (KEV) Catalog", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", "http://www.w3.org/2000/01/rdf-schema#label", "high", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Neff504856bd94814a0299fb077c1ba98", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N2523b388c8904f2885050ee00d15f281", "localId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "globalId", "", ""] +["_:N600baa7cc72e418cac29838b2bb675b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates presence of the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N61923a50c86b4ba0b8957d6b10968ce2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N388a67e4decf423d92132d6f8ca8791d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0506962c2ba748529cc29fdcb1a61bce", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Tool", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes relevant information about different steps of the training process.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ndaae4f6aabcc43579b940eeb55b7fa09", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/from", "globalId", "", ""] +["_:Nef779dc58efd41708d2dd810a1c22861", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N5fdc75b020564411a5c638c9aa7169b1", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/2000/01/rdf-schema#label", "framework", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N99de8e9db44844b5a9d11b197386f3d0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "localId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nf91d5c31a6274b259ae9d3da7de37c4d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "globalId", "", ""] +["_:N0530f2e80adb4606aeaa0ee0c0b381af", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2b4511fa0df849dca000a39ac34c254a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "http://www.w3.org/2000/01/rdf-schema#label", "vcs", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a sensor used for collecting the data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "data type is not known.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N583a7c7011cd4f8383fc2b8c5f308588", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N5234c2f9e59a42d9867dd1846c82c769", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N3a5f5817b005498690770268a7749990", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N53e150822c694617a126e0d67cfe88d2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Ncd772398fef24acfb9c377355aaa70e4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildId", "globalId", "", ""] +["_:N5ff41cce72fe443c82fe25e80c38d155", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "globalId", "", ""] +["_:N92aedbc611024e52983c2e9da6fdb503", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Ne16b834cedfa4b8db4d362a45561064d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N19bf11d3eb754e10bd676b9b7780555e", "localId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#in", "_:N316e8b195aee413da3f8a16b55477afe", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/ns/shacl#property", "_:Nc68e4e19132d4f32946d541ef17aaf0f", "localId", "", ""] +["_:Nba1a37de924c499f9ea9e93d8961d20a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd8636a05db834b139d4b2d9900e807b3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#comment", "Makes no assertion about the field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1411c3ed7f0d479e9873248eb22f62f2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", "globalId", "", ""] +["_:Nf25ca42c5bdc464f96d7d59ad9fcbf86", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc06c93e4d64345e59c0208ac0c2f799b", "localId", "", ""] +["_:N918ee014e9d04d56bb2c1642fd51a78f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/2000/01/rdf-schema#comment", "References the Element on the left-hand side of a relationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "globalId", "", ""] +["_:N1732034f40cb4a83b62ae814a97635b1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0039cd20d11f4e1eb92b14040fe9d2ab", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N49b44a8f36b14012934dd458769db5b1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "http://www.w3.org/2000/01/rdf-schema#comment", "A name used in a CdxPropertyEntry name-value pair.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0eee4677557545a6b9165efd2364e418", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "A license addition that is not listed on the SPDX Exceptions List.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "http://www.w3.org/2000/01/rdf-schema#label", "sha512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6484abf63505400facffdf4a86936716", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the type of annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N164dbad8168a495a98820f4a532bad8c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an exploit assessment of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5b173aa6ae6e4f6fbdb84567ce0dd388", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "globalId", "", ""] +["_:Nd5b0cc3893294e8b9a546e75d437ff15", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bom", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the Core profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8fe0d08ca3d644c394e8af08a3875047", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f901838dbd947f0aef2c3a4486db889", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/standardName", "http://www.w3.org/2000/01/rdf-schema#comment", "The name of a relevant standard that may apply to an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", "http://www.w3.org/2000/01/rdf-schema#label", "video", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has been copied to each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd81e7e097668428d8d37dd7470a77974", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ne08cc9309fbc4c70a85a57e7133b72c9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", "http://www.w3.org/2000/01/rdf-schema#comment", "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalDependency", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", "http://www.w3.org/2000/01/rdf-schema#comment", "data that is classified into a discrete number of categories, such as the eye color of a population of people.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Nd4b47d4885624e31ab7ede832237afeb", "localId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class representing a license combination consisting of one or more licenses.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", "http://www.w3.org/2000/01/rdf-schema#label", "core", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5f88e1becb864ed4b48bf6a4398f3638", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N02216a682b174628b5883d37733d43f4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5a72932413d2413b80569a5fb2966e41", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates the type of support that is associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7f32ec55b71f438fa081e1ea71e23e12", "localId", "", ""] +["_:Ndb4e54e4ff284342bf2f11f51d7f2567", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nfea77563e3c34609b220695df9edc63c", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:Nefba3a71506d41cfabbc865580be12f7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is documented by each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N606fa8b8d1d849bc90c0d4a759ca18c6", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc1f593d31b694f8d899bab4cfafbc332", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/2000/01/rdf-schema#label", "directDownload", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a bill of materials.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33e17640748a455091e7f615156e4be0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", "http://www.w3.org/2000/01/rdf-schema#label", "timeseries", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/specVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "http://purl.org/dc/terms/created", "2024-04-05", "http://www.w3.org/2001/XMLSchema#date", "", ""] +["_:Ndb15970ce7d34e878a0a7123dad52212", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N316e8b195aee413da3f8a16b55477afe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfb33f9dd13074a5393c69c370e2cb4f3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N0525f39f8ddf4826a2a11f9086af43f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", "http://www.w3.org/2000/01/rdf-schema#comment", "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/ns/shacl#property", "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides information about the creation of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Organization", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "globalId", "", ""] +["_:N303a78ff780a48fdbcb374ff43820d99", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N72025856b2c04aedb921459d28b8f3a5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf5c2326720d14f579097f3ab47e8c762", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#label", "altDownloadLocation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N93bfbd075cd04cd190f57aa7a8d728c1", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N5dc7ad7b328945158bb2c61ac16e194c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0912149adb0b4f64bf8c3c1266d60a4a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/startTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "dynamicAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ncf95e811579f435d8190022c27ddc51e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N6455bf8bc0534e40a8203b71244036bd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2ad096761e3044fcb326834ae006af13", "localId", "", ""] +["_:Nd6fa5fcf79af41aca71f798a61820519", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8aeda8c772e348afb93afc3dc5457355", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a container image which can be used by a container runtime application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bom", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "globalId", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6faa0ec40c2944cc96365e0200f91bc7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N2b5a3ed5442042b6b9ecf776b63ca010", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35f6a1c62bd343da8432836cbbbd8d0e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/from", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/2000/01/rdf-schema#comment", "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/2000/01/rdf-schema#label", "act", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N92fcf21ac8a64f358f68624b0432e712", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N8dfde768ccad4b2b91f251f73ad6cf1b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0a1213eddeb04e2eafef770905f9f1bd", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the threshold that was used for computation of a metric described in\nthe metric field.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Ndb89662869e64a20938720be32e56b7b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements that have a shared context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N87a01dfcca5f46d5a1312f1f1f5b2cd3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Neba2498dd09a4417a0ad37b9ab3e5e69", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N82d87d74437f447f8c64422e7639002d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8b832a0c38964c63b34ddf5c0285dbe7", "localId", "", ""] +["_:Nf1da170952db48feafb61cf8eea0c317", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Enumeration of the valid profiles.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd8636a05db834b139d4b2d9900e807b3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the size of the dataset.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#label", "underInvestigationFor", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/2000/01/rdf-schema#comment", "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/score", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nda2c2ba3d01c418691e78e82ec5ab9d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nabf8267e85fe497f80f96eaecb2a8ecc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the original host file that the snippet information applies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb97582dc84eb41e1aea78c6e5c7640d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/element", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#in", "_:N28454dc7d61d47bd9f19e037f20819ed", "localId", "", ""] +["_:N5546070c54224ce482c3cbd8b3c5d898", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5a947182f8f431690f104df52b37ae4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", "http://www.w3.org/2000/01/rdf-schema#label", "mavenCentral", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/identifier", "http://www.w3.org/2000/01/rdf-schema#comment", "Uniquely identifies an external element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "sourceArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies all the text and metadata associated with a license in the license\nXML format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#comment", "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes a relationship between one or more elements.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N872f874bf6a643fb922cfeb84da33004", "localId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", "localId", "", ""] +["_:Nb121f71437a9448ab9d30679e6c6e290", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "globalId", "", ""] +["_:N795110769b4a40288bd376f538317c4c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1288fc1d432c42e3a6691ec85b15b7f5", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N3da1b725121949138220323e55721af3", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7634a4c745c849d5b147ccbf41ef2bcb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N69cc60cd211d4ac69d884813fa143fc7", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an Element contained in a piece of software where a vulnerability was\nfound.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Tool", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/2000/01/rdf-schema#label", "issueTracker", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nc849cbed1d4d47158d3a8ce5af53fc2a", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nf679cce397cb41148e4dbc0de457788b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", "http://www.w3.org/2000/01/rdf-schema#comment", "Contains a URL where the License or LicenseAddition can be found in use.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56df7be59075471b9d1466398865afdd", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7d38e5ecd3ab4556b895637c8beeb598", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", "globalId", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/2000/01/rdf-schema#label", "red", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#label", "medium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "privacyAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of SPDX Elements that could potentially be serialized.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#label", "noSupport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/2000/01/rdf-schema#label", "low", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is an archived collection of one or more files (.tar, .zip, etc.).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/ns/shacl#property", "_:N48a995c812d240c8991c7af527062228", "localId", "", ""] +["_:N349791578bd441d7b8f76b4673275235", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:Nd8b38be0c57d489a82194c062bbe0b40", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N2cbc74620706496aa87fbc369f1b0b05", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsDilithium", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", "http://www.w3.org/2000/01/rdf-schema#label", "affects", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#comment", "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ncd5a93b6120a456e8dc0d3aa1b1a461c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd6035645b90646908c1881b4d968ce2e", "localId", "", ""] +["_:N3da1b725121949138220323e55721af3", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N1dede72d56c347b085cf801844a9768c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#positiveInteger", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", "http://www.w3.org/2000/01/rdf-schema#label", "copiedTo", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#in", "_:Na9652088c7d74da4a70741160e010184", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", "globalId", "", ""] +["_:Ndc9ca13ca7e045a890f1b0f580371051", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/ns/shacl#property", "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "localId", "", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5c7bcd96bfe24354b9199d05991a1c3c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nd9b0e8688faa4db8bc021fe50af253fe", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", "http://www.w3.org/2000/01/rdf-schema#comment", "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vectorString", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the CVSS vector string for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#in", "_:Naf98619f104747d192028a17f0ecd8bb", "localId", "", ""] +["_:Na71e0164a5d7491f82b21b32a559f2a4", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N093bbb61d9594baa8b978ad303aad6af", "localId", "", ""] +["_:N2a5d53abe06a466584993d22f4218cac", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", "http://www.w3.org/2000/01/rdf-schema#comment", "data is stored in tabular format or retrieved from a relational database.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd25a98977037415f94236e4881c554c0", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is data.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nacf93e2dadec4cf5a6eddab055d67599", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:Nca3d4237e69846fa81bc53dc43b6029e", "localId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ned0fe992065d49dd890483be50cffa45", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N1f1d4556eef644b9976392b54821e832", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a detailed description of the Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a module of a piece of software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na9652088c7d74da4a70741160e010184", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb94c57793202400e991c908c29f04c8d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:Nf34b3b1798cd4b95ad7460d818440421", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's testing phase, during development.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N3ecca35aacff49e881d71ec1ce7aeb60", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N40360ba6386b4532be67e616fc8cd204", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N12791c5f96074c62a3ed255af776b87b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nfe008f6511404b5b9d251ae6f0e14f51", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes what the given dataset should be used for.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Snippet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na183d066b46d4b6e86d08b078d501e3d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N3b580065725749b7ab5e332a55260a05", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N0eee4677557545a6b9165efd2364e418", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#in", "_:N6cb4c4347f154af1b5c9d61bdb1d6485", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#label", "runtimeAnalysisReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/2000/01/rdf-schema#comment", "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Hash", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", "http://www.w3.org/2000/01/rdf-schema#label", "sha3_512", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "globalId", "", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Ndaae4f6aabcc43579b940eeb55b7fa09", "localId", "", ""] +["_:Nc06c93e4d64345e59c0208ac0c2f799b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na5ef2f7d581a4fbeab399f28f36514fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/created", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb8bc8bf36ce34c4088051dc1208e1af9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Relationship", "http://www.w3.org/ns/shacl#property", "_:Nfaab51f8ebca452e84e1031a425be7d5", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nd8b38be0c57d489a82194c062bbe0b40", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Ndf280172f0834544a7759efee893b7d1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", "http://www.w3.org/2000/01/rdf-schema#comment", "the element follows the simple Licensing profile specification", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#label", "hasDependencyManifest", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", "http://www.w3.org/ns/shacl#property", "_:Na2ab1463e071402b941a055cf25405d0", "localId", "", ""] +["_:N6d5b2261790642829d74aecc96d7e681", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "globalId", "", ""] +["_:Nf8415ef95b3f4cf9a713cc1cdb95ad83", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c577594e1734b4ebabc9b18761d5162", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:Ne3c684285049449e9ee58f318c943f4f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a single or a collection of source files.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/2000/01/rdf-schema#label", "invokedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N91f490513b4b406b85ec22decdb5274a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd685430b1a9c44d6abb820e3d22ad9fc", "localId", "", ""] +["_:N20c73971e3d9412097f90918b0fbd9d0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:Nbb4d130582c44c00bdc80ffc03d8dde6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5e38eb28cfa046dfa2ad5d2c441ae3db", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf91d5c31a6274b259ae9d3da7de37c4d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Property describing the start time of a build.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:Nad16ba6a202e461689abc70b9fcea166", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/2000/01/rdf-schema#label", "dataset", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Software/Package", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/2000/01/rdf-schema#comment", "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nf71e260bcc9940d2b8cb0fdf962a1454", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", "globalId", "", ""] +["_:N331685f17119458e9f8d03e1032a587d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", "http://www.w3.org/2000/01/rdf-schema#label", "security", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nc5aa8a1325b0473daf3d15821b492d34", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "globalId", "", ""] +["_:N42c7e772b0ff4d5d9a97a8c3334d8a58", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1931b6c2fa1e43769bda7a922ee5d431", "localId", "", ""] +["_:N00a4f89addf045d28864aa6380106e8c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Na69fc7a1c2654979ada4d85b1717874b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "http://www.w3.org/2000/01/rdf-schema#label", "md5", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a file system image that can be written to a disk (or virtual) partition.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/environment", "globalId", "", ""] +["_:N473befceadbe42d0bd9069dd0ce4699b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbfec1cd5e43649cba6485b1a01ec1b68", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#property", "_:N56df7be59075471b9d1466398865afdd", "localId", "", ""] +["_:Na7d9beb4671848ceafe78da042cf29b8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf88be8ef2ebb4b8284efc3143b301313", "localId", "", ""] +["_:N4106ddc0ab0a4a51b658689625cb4bcd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3ecca35aacff49e881d71ec1ce7aeb60", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N8a427ef4e2c34b2980a778d817ac3ca2", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an EPSS assessment for a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/2000/01/rdf-schema#label", "purchaseOrder", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "http://www.w3.org/2000/01/rdf-schema#comment", "The highest level of risk posed by an AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#label", "sha224", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", "http://www.w3.org/2000/01/rdf-schema#label", "trainedOn", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to binary artifacts related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes all the preprocessing steps applied to the training data before the\nmodel training.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates elements as products where the impact of a vulnerability is being\ninvestigated.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", "http://www.w3.org/2000/01/rdf-schema#label", "crystalsKyber", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Ne1807e7da3dc42d8921080afa2df652f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "globalId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "globalId", "", ""] +["_:N9b9a98064ff244dab80a08bdd5555d88", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N24390832561247ea9edbcfeca24f67aa", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/2000/01/rdf-schema#comment", "A license expression participating in a license set.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nd685430b1a9c44d6abb820e3d22ad9fc", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", "globalId", "", ""] +["_:Na4c9bfc328f44f7a82b4bb6b0d500714", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N92b9f222f5b94268a55c169346f957f1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", "http://www.w3.org/2000/01/rdf-schema#label", "development", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/extension", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "globalId", "", ""] +["_:N0506962c2ba748529cc29fdcb1a61bce", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides the location of an external reference.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/scope", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", "http://www.w3.org/ns/shacl#property", "_:N0265fd9255b84ae094abb5c54616ae2b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", "http://www.w3.org/2000/01/rdf-schema#label", "diskImage", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", "http://www.w3.org/2000/01/rdf-schema#label", "hasAddedFile", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N61923a50c86b4ba0b8957d6b10968ce2", "localId", "", ""] +["_:N4a0643790ee647d0bf9d75f3f4f80581", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nc07374747c9448faae0e1e2622db1d7d", "http://www.w3.org/ns/shacl#pattern", "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2caaec60ce124c8091e058eea48622ba", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N918ee014e9d04d56bb2c1642fd51a78f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5db3bc3ac4ca4493a796356af601403e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/subject", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", "http://www.w3.org/2000/01/rdf-schema#label", "source", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", "http://www.w3.org/2000/01/rdf-schema#comment", "Property that describes the URI of the build configuration source file.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:N9b073a51b7934d96882a3d7b2516e6ee", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time from which an element is no longer applicable / valid.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N575a40dcf9d2470382a3cb67027db887", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N600baa7cc72e418cac29838b2bb675b8", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N08f35fbea3f34a129863ad8e6b88a5a1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/context", "globalId", "", ""] +["_:Ndba01dc226ee49c3be1b757c1787cb43", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6ca95996c3ba43bdbff56b6d5b9fdab9", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N3150b51898a54a30b8c523d53721610a", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N40360ba6386b4532be67e616fc8cd204", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3c78df17f57a45d7b66ef27d1d0b60be", "localId", "", ""] +["_:Nb30a287d827e4316be15597c73c84fef", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N7ce5215fd77b4391bb0faf9a289c9651", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "globalId", "", ""] +["_:Na4c9815bb1c74163aad85a1b13e04f13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/contentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N19caf49b458948aab96db18d18a37807", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/exploited", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/environment", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "globalId", "", ""] +["_:Nef0b82c6d2ef4a5c8dbd141212401b13", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", "globalId", "", ""] +["_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/2000/01/rdf-schema#label", "gitoid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nfc42797a854d4008a99f6062c2875fc3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N3a5f5817b005498690770268a7749990", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/homePage", "http://www.w3.org/2000/01/rdf-schema#comment", "A place for the SPDX document creator to record a website that serves as the\npackage's home page.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", "http://www.w3.org/2000/01/rdf-schema#label", "md6", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/scope", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/2000/01/rdf-schema#comment", "An SPDX Element containing an SPDX license expression string.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", "http://www.w3.org/2000/01/rdf-schema#label", "lite", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", "http://www.w3.org/2000/01/rdf-schema#label", "availableFrom", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9919f57d67bd4992ac37a637007f56b9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf562af8defe04dbc89db49905f399a11", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/2000/01/rdf-schema#label", "chat", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", "globalId", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb757eb766bcf484dab7fcc8640520f26", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/metric", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the measurement of prediction quality of the AI model.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne2ff293b6d084635bd69a6ad308a4ea9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", "globalId", "", ""] +["_:N24687f30f3e64312b787f409644f4343", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/prefix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", "http://www.w3.org/2000/01/rdf-schema#label", "qualityAssessmentReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Nad16ba6a202e461689abc70b9fcea166", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7c1afce8b8f14d94b7b00b67814f4a92", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", "globalId", "", ""] +["_:N3484c741d91a4723b5c7f52d12122e53", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8dfde768ccad4b2b91f251f73ad6cf1b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:Ne55baec5fd904832ad3e305685422c87", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Bundle", "http://www.w3.org/ns/shacl#property", "_:N08f35fbea3f34a129863ad8e6b88a5a1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#comment", "Megajoule.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", "localId", "", ""] +["_:N8b832a0c38964c63b34ddf5c0285dbe7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7b217a3de6634154b32708f11e4a7f89", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N2c2208ee7e3d40ca97119f695308f1f3", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N218b2297f9704d99bf1b9e818945ce5c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", "http://www.w3.org/2000/01/rdf-schema#comment", "A collection of Elements, not necessarily with unifying context.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/", "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright", "Copyright (C) 2024 SPDX Project", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a certification report for a package from an accredited/independent body.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N4daef40acaac487baa5fb20c0fd627ac", "localId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:Ncaa9a447e341490894b8ea06dc485a0c", "localId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6bb457a45b8149f09614fbba0dde597c", "localId", "", ""] +["_:Nd34755ea58bd4430b6e06edfe49d3836", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element contains a set of changes to update, fix, or improve another Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N56bea2883781491d89c9330a875e5e7d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:Na6e92abe54d446e79e8c88579ac830f2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6a47af8674814d9a92314ce9c053556a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#property", "_:Nb831ba68859845819894bc24124f2493", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the level of support associated with an artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne0ead3de0c1842e8803711c778d3de8f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", "http://www.w3.org/2000/01/rdf-schema#label", "data", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Package", "http://www.w3.org/ns/shacl#property", "_:N2cbc74620706496aa87fbc369f1b0b05", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the exploit catalog type.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N6999f1ba66054cb9a6683482a6046870", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "globalId", "", ""] +["_:Ne08cc9309fbc4c70a85a57e7133b72c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf253c5f3fc0f40728e3b713da72f534f", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element has manifest files that contain dependency information in each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Extension/Extension", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/File", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:Nb29082bbf3a54faf833061815ecea3cd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb0e55a7a3f404b718aa14c0523f748fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb5d70b9706cb46a29801cbcb49dffef6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nfe008f6511404b5b9d251ae6f0e14f51", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N4d64fe8feb16494b9674f49e196cdb1d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerabilityDisclosureReport", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to an alternative download location.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/namespace", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/2000/01/rdf-schema#comment", "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nb964a7ec32c84ad9a7e5068cf4f02822", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", "http://www.w3.org/2000/01/rdf-schema#label", "sha256", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N1fa9bc1c7b534e18a5a523e72f951ec4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/to", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N2ceaa2ca925c4e80b9d615666e91bb76", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb41bc224042f48e3b42c657cad654e89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N7fc15c5a65f84366ada3c30ddb250517", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/description", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N29537a8625514225965436aae0e64d9f", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", "globalId", "", ""] +["_:Nefb954041ff74e1c981f465bcaab5d3b", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N12791c5f96074c62a3ed255af776b87b", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", "http://www.w3.org/2000/01/rdf-schema#label", "test", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "globalId", "", ""] +["_:Nc505579387424472888c03cc153dd107", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N35748216664842588d1d2428d0238f7c", "localId", "", ""] +["_:N09d41b24e37944889b085f3a5dec27a2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4740a545730245d7b9106bd4ffc8582c", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/justificationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N88d076d5560e44378fc63f2196d3e9be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7c08903e22d24c6f9559062e74c8c807", "localId", "", ""] +["_:N18770e9733c8452f9533b746b1378584", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", "globalId", "", ""] +["_:Na34b9857d3494dd3bc57ea0aac372489", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/Organization", "globalId", "", ""] +["_:Nb831ba68859845819894bc24124f2493", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Software Composition Analysis (SCA) report.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N559cf862cf484b388a29cbb3e04d2539", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf9e398de7c23460c95e7fec63c92065d", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", "http://www.w3.org/2000/01/rdf-schema#label", "binaryArtifact", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", "http://www.w3.org/2000/01/rdf-schema#comment", "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/catalogType", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["_:Nbe7b313a45b948c6a406f37ccd2c5ee6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N39208ce6d6704289bce5a33c713589ba", "localId", "", ""] +["_:Nb9bb8e59941d436cb193d8d8ecd38cce", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N62cbeb231bc544a7ac8aab5e8217d804", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6e64ceb369f04614bd3449d6d9bea0d1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", "http://www.w3.org/2000/01/rdf-schema#comment", "The relationship is known not to be exhaustive.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Hash", "http://www.w3.org/ns/shacl#property", "_:Ne452fc8d239747848f49c2ac0d8e39d8", "localId", "", ""] +["_:N6841333db1c2440083b2a1e012968a62", "http://www.w3.org/ns/shacl#minCount", "2", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Used to associate a `from` Artifact with each `to` Vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9ebeb1bc85e741fb8d52f00b17dd5edb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N308fb6485f7d4864923946d7ba83b984", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an external identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/lineRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the line range in the original host file that the snippet information\napplies to.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/ns/shacl#property", "_:N1411c3ed7f0d479e9873248eb22f62f2", "localId", "", ""] +["_:N2ceaa2ca925c4e80b9d615666e91bb76", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeCannotBeControlledByAdversary", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/2000/01/rdf-schema#comment", "Class that describes a build instance of software/artifacts.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "http://www.w3.org/2000/01/rdf-schema#label", "md4", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nd696d0bece9045cfa929993fc189dab6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", "http://www.w3.org/ns/shacl#property", "_:N0e6424a884214886a5182405c83ce0e5", "localId", "", ""] +["_:N4b9123c429a143928240efffd877c09e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", "globalId", "", ""] +["_:Nc68e4e19132d4f32946d541ef17aaf0f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N026b410848804fea9d8c504126844111", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N6720587ff9a14662ba139a3cc04633d6", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Na0207e8ebb3546d494a226941f26b82a", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", "http://www.w3.org/2000/01/rdf-schema#label", "cpe23", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N24fab7059f894755bb21ef4ddc4d0f4f", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/comment", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/2000/01/rdf-schema#label", "file", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nc27cd84531894867a3501b47035a2c04", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf1da170952db48feafb61cf8eea0c317", "localId", "", ""] +["_:N26e5d106c3b9457fa387974ed45155a7", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbfec1cd5e43649cba6485b1a01ec1b68", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "http://www.w3.org/2000/01/rdf-schema#comment", "Used when the type does not match any of the other options.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/createdBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["_:N645cfb9d3c334cc1a3175307175364c7", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/probability", "http://www.w3.org/2000/01/rdf-schema#comment", "A probability score between 0 and 1 of a vulnerability being exploited.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbc8ad111179e4d28aeca12d049d01869", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", "globalId", "", ""] +["_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N2b4511fa0df849dca000a39ac34c254a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["_:Nf88be8ef2ebb4b8284efc3143b301313", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Ne4b5d8545c4c40c394f6fcfbf82ac649", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", "globalId", "", ""] +["_:N8a3126cc6d804604930d39f15a0a7954", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is a software application.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the time an artifact was released.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", "http://www.w3.org/2000/01/rdf-schema#comment", "data is audio based, such as a collection of music from the 80s.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "globalId", "", ""] +["_:N6c6d7f192a574d27bdc34c9ab2cafe1f", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", "http://www.w3.org/2000/01/rdf-schema#comment", "Defines the end of a range.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/Sbom", "http://www.w3.org/ns/shacl#property", "_:N135abe5aa7184697abfa5b1134f74635", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", "http://www.w3.org/2000/01/rdf-schema#label", "noAssertion", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", "http://www.w3.org/ns/shacl#property", "_:N6d5b2261790642829d74aecc96d7e681", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "http://www.w3.org/ns/shacl#property", "_:N24687f30f3e64312b787f409644f4343", "localId", "", ""] +["_:N642c1242529241e184296a5a0b57d7d5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", "globalId", "", ""] +["_:N02429c72607846619a4d3bc4f9e9e971", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N8a3126cc6d804604930d39f15a0a7954", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/byteRange", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "globalId", "", ""] +["_:N4a71e77d78634c69959e3e011db657c9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N897103c5db374d44a639af1692f596b0", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element is an ancestor of each `to` Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:N7512c361fa6640a2a2d5027dcca31ae1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/2000/01/rdf-schema#label", "documentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N48a995c812d240c8991c7af527062228", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Element", "globalId", "", ""] +["_:Nc12aef8332fd4b9484195f299f484175", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nf4e6c1ca88814f8983b689a6d618c839", "localId", "", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N11d2469065ae40ba876541501b6ad701", "localId", "", ""] +["_:N83380edfda0143559b20b6f86b17c17a", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N33cee511d45243669ca60bd0a0f4a3a9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "A relationship has specific context implications during an element's design.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", "http://www.w3.org/2000/01/rdf-schema#label", "build", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#comment", "Describes the anonymization methods used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalRef", "http://www.w3.org/2000/01/rdf-schema#comment", "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#boolean", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:Na1a58d858f5445009e4e9c1c79b01ee8", "localId", "", ""] +["_:N9539a3aa8f2640ccbf5e3147b95d0acd", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", "localId", "", ""] +["_:N99c1538993cb4cc0a17aa9ebc04745e5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5d7b7ab80ba94da78154e51e39f4b55d", "localId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies an AI package and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N49b44a8f36b14012934dd458769db5b1", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", "globalId", "", ""] +["_:Nf0f8e43d5c7b417bb04959276983ea1c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", "globalId", "", ""] +["_:N056b619290c944b1b9efec2e986869b0", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", "http://www.w3.org/ns/shacl#property", "_:N8a427ef4e2c34b2980a778d817ac3ca2", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:Nbc8699aa0f544965affe9ba57e69fa78", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5484226f71e247459aecae3701f31924", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 0.1 - 3.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na242505ccf884ef29a794e57c9d3ddc8", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nfec76341615042fa920d080bb121bd66", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", "http://www.w3.org/2000/01/rdf-schema#label", "hasExample", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Nce1c9f7707b749df9c04405465f5d693", "localId", "", ""] +["_:N832cd397b3524a16ae0417e09ab5b40e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", "globalId", "", ""] +["_:N33bcc4b85bee4aa5a17cdd2efbef8922", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Ndc1cec228c454b62a5ab7eee0eab8995", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N7634a4c745c849d5b147ccbf41ef2bcb", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["_:Nac7de1144825418b96a3c43ff6d678a6", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", "globalId", "", ""] +["_:N0786949c6ae949ca971b0870a39e5628", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nfc1ba2b198a0488b97e460730d5d8314", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N84fbf505fc5b4942809840c744afbc50", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Element", "http://www.w3.org/ns/shacl#property", "_:N53d06bdaf9464b0fbd454088aee08786", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides relevant information about the AI software, not including the model\ndescription.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#in", "_:N1dafd5bc3b6040e490dfb6830c66802d", "localId", "", ""] +["_:N1192103857734e528f997dca990b3645", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd72c256eb46a430db7454aad221ffc59", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", "globalId", "", ""] +["_:N0e6424a884214886a5182405c83ce0e5", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to instructions for reporting newly discovered security vulnerabilities for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N15f27dd5aa464b16b06fd5927807179d", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/hashValue", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["_:Nba7479035af442ada086c0338c451097", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Nc68de2290dec4037b97bb40ca8c0adb1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nd34fffad560944e88cd9ddfe76e7554c", "localId", "", ""] +["_:N7c00958b8c7c491d82e976dea47764ee", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5ff41cce72fe443c82fe25e80c38d155", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", "http://www.w3.org/2000/01/rdf-schema#comment", "there is no support for the artifact from the supplier, consumer assumes any support obligations.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:N749163c9109e4fdaadb44dbb77f4bed4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N4c52d9d036934841b17eac13b27a39f8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbc9ecbd1db234efabb062c64c5b1582e", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/score", "http://www.w3.org/2000/01/rdf-schema#comment", "Provides a numerical (0-10) representation of the severity of a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Agent", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["_:N6bf989b95c5e498e988052131700d5e6", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/severity", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#label", "foundBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N9e907f1b2a0a4dbfa462bb2801f85a99", "http://www.w3.org/ns/shacl#in", "_:N1192103857734e528f997dca990b3645", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", "http://www.w3.org/2000/01/rdf-schema#label", "megajoule", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the full text of a LicenseAddition, in SPDX templating format.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", "globalId", "", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/name", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", "http://www.w3.org/ns/shacl#property", "_:N33bcc4b85bee4aa5a17cdd2efbef8922", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of the content identifier.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/domain", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures the domain in which the AI package can be used.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", "http://www.w3.org/2000/01/rdf-schema#label", "riskAssessment", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "http://www.w3.org/ns/shacl#property", "_:N8aca67d5adb046a18a3855733ab12c9b", "localId", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc0cbe94b1b9f4c518494e91bc175e759", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", "http://www.w3.org/2000/01/rdf-schema#comment", "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N9b28133398a64d5eb219290008f464a6", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N8919fac9e03440b19957656e4c6d5f47", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", "http://www.w3.org/2000/01/rdf-schema#comment", "A key with an associated value.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", "http://www.w3.org/2000/01/rdf-schema#label", "vulnerableCodeNotInExecutePath", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", "http://www.w3.org/2002/07/owl#sameAs", "https://spdx.org/rdf/3.0.1/terms/Licensing/None", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/context", "http://www.w3.org/2000/01/rdf-schema#comment", "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies a vulnerability and its associated information.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne3e78235566445608978be9329e74cc2", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#comment", "Identifies the name of an Element as designated by the creator.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", "http://www.w3.org/2000/01/rdf-schema#comment", "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", "http://www.w3.org/2000/01/rdf-schema#comment", "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", "http://www.w3.org/2000/01/rdf-schema#comment", "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Nbeb8b7d55cf74321942fb0ae3da5add9", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:Nca3d4237e69846fa81bc53dc43b6029e", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#label", "other", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", "globalId", "", ""] +["_:Nc8cdfd8c3ff74b469faab892beaa7bd5", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nb121f71437a9448ab9d30679e6c6e290", "localId", "", ""] +["_:N604da09912b74a828b98bb6b28fbf0a7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", "globalId", "", ""] +["_:N7b217a3de6634154b32708f11e4a7f89", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", "http://www.w3.org/2000/01/rdf-schema#label", "trackStar", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", "globalId", "", ""] +["_:N4feeea92771943cf9cdc1cb0e5a19eb8", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1732034f40cb4a83b62ae814a97635b1", "localId", "", ""] +["_:N722b841e0cc144789cdd7e01a5a50ea9", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Person", "http://www.w3.org/2000/01/rdf-schema#comment", "An individual human being.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", "http://www.w3.org/2000/01/rdf-schema#comment", "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "http://www.w3.org/2000/01/rdf-schema#comment", "Represents the energy quantity.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N5c2be488612c4f73abb9b7b35b5a2e13", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", "globalId", "", ""] +["_:Nd34fffad560944e88cd9ddfe76e7554c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "http://www.w3.org/1999/02/22-rdf-syntax-ns#nil", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", "http://www.w3.org/2000/01/rdf-schema#comment", "[Dilithium](https://pq-crystals.org/dilithium/)", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N19ffa456cd9a4738ae5406b9443c8eb1", "http://www.w3.org/ns/shacl#minCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:Nb94c57793202400e991c908c29f04c8d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N60b7e732109b4d57a2174a1793e81730", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", "http://www.w3.org/2000/01/rdf-schema#label", "fixedBy", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N30178f0a784c43079551a63b841da0ba", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf).", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/name", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the type of an annotation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N5f88e1becb864ed4b48bf6a4398f3638", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", "globalId", "", ""] +["_:N1904cd4ccd84473a8555c9f0885877ef", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["_:N1e10b72106c748bf8326627b02c07313", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", "globalId", "", ""] +["_:Nb8f515d8797c45b7894e3e707f5223fd", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N6484abf63505400facffdf4a86936716", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", "http://www.w3.org/2000/01/rdf-schema#comment", "The Element is documentation.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Ne1daaa3e8de142d9b4b0399fc62bc270", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5aebbc4f9aa74a9ca8a930203a1284f2", "localId", "", ""] +["_:Na1a58d858f5445009e4e9c1c79b01ee8", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:Nbd5d22a16c594086a7dab4ce2199d3be", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N91f490513b4b406b85ec22decdb5274a", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", "http://www.w3.org/2000/01/rdf-schema#label", "hasOptionalComponent", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/summary", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N5c52044e0e91489480dcbc1b1bb7e350", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", "globalId", "", ""] +["_:Nfaab51f8ebca452e84e1031a425be7d5", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:Nb964a7ec32c84ad9a7e5068cf4f02822", "localId", "", ""] +["_:N50272c7539ef4c818bf3bccae2d7a4e7", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N681b535a77a04528a517054508bb1c40", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N4252a866980f4a839fad017a197dc8af", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["_:N47bf567d302048459f09bc6f9e280b5e", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbed0dcc3c778406db4d3f6eca8c4c177", "localId", "", ""] +["_:N624418f1db494f7ebe03fa364190d21d", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N31ca4e8daaef47e2b5fa1bf4eaafec63", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N042b9bb4151c4219ae35ea4665b1cb85", "localId", "", ""] +["_:Neea78b34b53645d9b977d4dafb032fbb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", "globalId", "", ""] +["_:Na6ee2b8d1d624e21ae8b60f60a68d84d", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#anyURI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Build/Build", "http://www.w3.org/ns/shacl#property", "_:Neff504856bd94814a0299fb077c1ba98", "localId", "", ""] +["_:Nd4b47d4885624e31ab7ede832237afeb", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["_:N401bb3f0ba1b4f84b7db752de9c9ecda", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/subject", "globalId", "", ""] +["_:N95a2e8e0514048c496ba86d6678afb52", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Na5ef2f7d581a4fbeab399f28f36514fc", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N1f2ca5a087da4ddc9e0f1c3623d854cb", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N5cdabdb752694f1c9a65db2083a57b66", "localId", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", "http://www.w3.org/2000/01/rdf-schema#comment", "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N31d552db951b47269f52c41b41761d5d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Software/File", "globalId", "", ""] +["_:N5d88af867062488cb6e9d9d48ff41920", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Ne63e0f50816b4addb79d58c16a81bee3", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["_:N13b712ac882f4d5ca50bb0fd516bd04d", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nbdef0d6b9a2a427fb4b1814e3c775c93", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["_:N4740a545730245d7b9106bd4ffc8582c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N29537a8625514225965436aae0e64d9f", "localId", "", ""] +["_:N96aafef3616e46f882877b2a7e11b757", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#Literal", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:Nb79e78a0d55242f68b3169bb1d0ec6bc", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", "http://www.w3.org/2000/01/rdf-schema#range", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#property", "_:N92b9f222f5b94268a55c169346f957f1", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/ns/shacl#property", "_:N7ea991bcafe746f8ae7f965a4039cbc4", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", "globalId", "", ""] +["_:Nce1c9f7707b749df9c04405465f5d693", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#dateTimeStamp", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", "http://www.w3.org/2000/01/rdf-schema#label", "model", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", "http://www.w3.org/2000/01/rdf-schema#label", "expandedLicensing", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Artifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://spdx.invalid./AbstractClass", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N97f27abc23b9427f8445614385fdd5e7", "http://www.w3.org/ns/shacl#pattern", "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N2d5629b576a240eca4cbdd951a693dd9", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["_:N51a6abe36bbb4a9a8cce23555b0fa72a", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:Nc12aef8332fd4b9484195f299f484175", "localId", "", ""] +["_:N5c7bcd96bfe24354b9199d05991a1c3c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "http://www.w3.org/2000/01/rdf-schema#range", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/locator", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#Class", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/completeness", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", "http://www.w3.org/2000/01/rdf-schema#comment", "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N25996c4894e1460a8b698f0cbef34195", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", "http://www.w3.org/2000/01/rdf-schema#comment", "A reference to a dynamic analysis report for a package.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", "http://www.w3.org/2000/01/rdf-schema#comment", "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/Annotation", "http://www.w3.org/ns/shacl#property", "_:Ned0fe992065d49dd890483be50cffa45", "localId", "", ""] +["_:Ne30781691aca482680ffd9bbd2045c91", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N1bc2f7dd56904c86b46e121aeb8cb636", "localId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", "http://www.w3.org/ns/shacl#property", "_:N5c2be488612c4f73abb9b7b35b5a2e13", "localId", "", ""] +["_:Nc4c2447375154c088326785e5201d90c", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", "globalId", "", ""] +["_:N8aca67d5adb046a18a3855733ab12c9b", "http://www.w3.org/ns/shacl#maxCount", "1", "http://www.w3.org/2001/XMLSchema#integer", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNode", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", "http://www.w3.org/2000/01/rdf-schema#comment", "When a CVSS score is between 4.0 - 6.9", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", "http://www.w3.org/2000/01/rdf-schema#comment", "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:Na063ca2df3034db0bf1b8b898aa3a404", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", "http://www.w3.org/2000/01/rdf-schema#label", "configuration", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N341f19d094bb4183a2db06364073f914", "http://www.w3.org/1999/02/22-rdf-syntax-ns#rest", "_:N2c94076e809942598a2c483d17eddfc7", "localId", "", ""] +["_:Ne452fc8d239747848f49c2ac0d8e39d8", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", "http://www.w3.org/2000/01/rdf-schema#label", "secureSoftwareAttestation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["_:N749163c9109e4fdaadb44dbb77f4bed4", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Build/buildType", "globalId", "", ""] +["_:Nf208bbcafacb4617ad8ce48ed0c5320a", "http://www.w3.org/ns/shacl#class", "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", "globalId", "", ""] +["_:N4e8eb71dd7554ffe97d6bf2fb08a5437", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#BlankNodeOrIRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/Core/Agent", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", "http://www.w3.org/ns/shacl#nodeKind", "http://www.w3.org/ns/shacl#IRI", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", "http://www.w3.org/2000/01/rdf-schema#label", "swid", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#ObjectProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/ns/shacl#NodeShape", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", "http://www.w3.org/2000/01/rdf-schema#label", "hasDocumentation", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", "http://www.w3.org/2000/01/rdf-schema#subClassOf", "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#DatatypeProperty", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", "http://www.w3.org/2000/01/rdf-schema#label", "install", "http://www.w3.org/2001/XMLSchema#string", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", "http://www.w3.org/1999/02/22-rdf-syntax-ns#type", "http://www.w3.org/2002/07/owl#NamedIndividual", "globalId", "", ""] +["_:N0265fd9255b84ae094abb5c54616ae2b", "http://www.w3.org/ns/shacl#datatype", "http://www.w3.org/2001/XMLSchema#string", "globalId", "", ""] +["_:N1dede72d56c347b085cf801844a9768c", "http://www.w3.org/ns/shacl#path", "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/AI/limitation", "http://www.w3.org/2000/01/rdf-schema#comment", "Captures a limitation of the AI software.", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] +["_:N8d94ac10bc5f422ca55e9aa451328fd1", "http://www.w3.org/1999/02/22-rdf-syntax-ns#first", "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", "globalId", "", ""] +["https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", "http://www.w3.org/2000/01/rdf-schema#comment", "any hashing algorithm that does not exist in this list of entries", "http://www.w3.org/1999/02/22-rdf-syntax-ns#langString", "en", ""] diff --git a/v3.0/rdf/spdx-model.json-ld b/v3.0/rdf/spdx-model.json-ld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0/rdf/spdx-model.json-ld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0/rdf/spdx-model.jsonld b/v3.0/rdf/spdx-model.jsonld new file mode 100644 index 0000000000..3a8ce5df75 --- /dev/null +++ b/v3.0/rdf/spdx-model.jsonld @@ -0,0 +1,15452 @@ +[ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Timestamp of impact statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates presence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "yes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/WithAdditionOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870" + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15" + } + ] + }, + { + "@id": "_:N6999f1ba66054cb9a6683482a6046870", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition" + } + ] + }, + { + "@id": "_:Nd5b0cc3893294e8b9a546e75d437ff15", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data that is classified into a discrete number of categories, such as the eye color of a population of people." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "categorical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAddedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a machine learning or artificial intelligence model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "model" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a chipset, processor, or electronic board." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "device" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasSpecification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A LicenseAddition participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A place for the SPDX document creator to record a website that serves as the\npackage's home page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the content type of an Element or a Property." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a plan, guideline or strategy how to create, perform or analyze an application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "specification" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "coordinatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDataFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies from where or whom the Element originally came." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serious" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is a collection of images such as pictures of animals." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "image" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The field describes the availability of a dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/Build", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Class that describes a build instance of software/artifacts." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4" + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4" + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1" + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98" + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51" + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e" + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807" + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693" + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d" + } + ] + }, + { + "@id": "_:N749163c9109e4fdaadb44dbb77f4bed4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType" + } + ] + }, + { + "@id": "_:Ncd772398fef24acfb9c377355aaa70e4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId" + } + ] + }, + { + "@id": "_:N93bfbd075cd04cd190f57aa7a8d728c1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint" + } + ] + }, + { + "@id": "_:Neff504856bd94814a0299fb077c1ba98", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri" + } + ] + }, + { + "@id": "_:Nfe008f6511404b5b9d251ae6f0e14f51", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest" + } + ] + }, + { + "@id": "_:N95c3ead21e6e4ecd95af23263451b25e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter" + } + ] + }, + { + "@id": "_:N19caf49b458948aab96db18d18a37807", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nce1c9f7707b749df9c04405465f5d693", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N56bea2883781491d89c9330a875e5e7d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what created the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Low/no risk is posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset can be shared within a community of peers and partners." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "green" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasExample" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide an enumerated set of lifecycle phases that can provide context to relationships." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/DisjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6841333db1c2440083b2a1e012968a62" + } + ] + }, + { + "@id": "_:N6841333db1c2440083b2a1e012968a62", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md5" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements that have a shared context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1" + } + ] + }, + { + "@id": "_:N08f35fbea3f34a129863ad8e6b88a5a1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the software support channel or other support information for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "invokedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasRequirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is documented by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDocumentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "usesTool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SoftwareAgent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A software agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/environment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the session in which a build is invoked." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is video based, such as a collection of movie clips featuring Tom Hanks." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "video" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A property name with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1" + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99" + } + ] + }, + { + "@id": "_:N19ffa456cd9a4738ae5406b9443c8eb1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName" + } + ] + }, + { + "@id": "_:N303a78ff780a48fdbcb374ff43820d99", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Agent represents anything with the potential to act on a system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the line range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/", + "@type": [ + "http://www.w3.org/2002/07/owl#Ontology" + ], + "http://purl.org/dc/terms/abstract": [ + { + "@language": "en", + "@value": "This ontology defines the terms and relationships used in the SPDX specification to describe system packages" + } + ], + "http://purl.org/dc/terms/created": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#date", + "@value": "2024-04-05" + } + ], + "http://purl.org/dc/terms/creator": [ + { + "@language": "en", + "@value": "SPDX Project" + } + ], + "http://purl.org/dc/terms/license": [ + { + "@id": "https://spdx.org/licenses/Community-Spec-1.0.html" + } + ], + "http://purl.org/dc/terms/references": [ + { + "@id": "https://spdx.dev/specifications/" + } + ], + "http://purl.org/dc/terms/title": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@language": "en", + "@value": "System Package Data Exchange (SPDX) Ontology" + } + ], + "http://www.w3.org/2002/07/owl#versionIRI": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/" + } + ], + "https://www.omg.org/spec/Commons/AnnotationVocabulary/copyright": [ + { + "@language": "en", + "@value": "Copyright (C) 2024 SPDX Project" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "inlineMitigationsAlreadyExist" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Capture the scope of information about a specific relationship between elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalComponent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A string in the license expression format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an exploit assessment of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6" + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa" + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1" + } + ] + }, + { + "@id": "_:N606fa8b8d1d849bc90c0d4a759ca18c6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType" + } + ] + }, + { + "@id": "_:N67676f11ca184c05a0d5f6249a4b14fa", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited" + } + ] + }, + { + "@id": "_:N92b9f222f5b94268a55c169346f957f1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "No assertion can be made about the completeness of the relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Kyber](https://pq-crystals.org/kyber/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsKyber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is the evidence that a specification or requirement has been fulfilled." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "evidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an ExternalMap of Element identifiers." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopedRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide context for a relationship that occurs in the lifecycle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517" + } + ] + }, + { + "@id": "_:N7fc15c5a65f84366ada3c30ddb250517", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/scope" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides low level control over a device's hardware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "firmware" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "npm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Element contained in a piece of software where a vulnerability was\nfound." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element provides a requirement needed as input for another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "requirement" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit within the digital domain." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N804dd6908e264d10be7ab47179d84223" + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc" + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26" + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a" + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227" + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4" + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420" + } + ] + }, + { + "@id": "_:N804dd6908e264d10be7ab47179d84223", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/originatedBy" + } + ] + }, + { + "@id": "_:Nd507d892ccf546c68470c2ad1de481bc", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:Nb757eb766bcf484dab7fcc8640520f26", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N83380edfda0143559b20b6f86b17c17a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N3aae1ae126af41909469c96ead6b6227", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N7ea991bcafe746f8ae7f965a4039cbc4", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName" + } + ] + }, + { + "@id": "_:N168ff94489204ce2b3d2bcc2e291d420", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mapping between prefixes and namespace partial URIs." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577" + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f" + } + ] + }, + { + "@id": "_:N2bf58c59d4e345bd92c2c66da13d5577", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix" + } + ] + }, + { + "@id": "_:Nc68e4e19132d4f32946d541ef17aaf0f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/Vulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a vulnerability and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e" + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7" + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2" + } + ] + }, + { + "@id": "_:Nca3d4237e69846fa81bc53dc43b6029e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N97f27abc23b9427f8445614385fdd5e7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N1411c3ed7f0d479e9873248eb22f62f2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/EpssVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an EPSS assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3" + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d" + } + ] + }, + { + "@id": "_:N88fb6b952c0b4497afed840a2b36b7c3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability" + } + ] + }, + { + "@id": "_:N331685f17119458e9f8d03e1032a587d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoneElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPenTestReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timeseries" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license expression participating in a license set." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "publishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of Elements, not necessarily with unifying context." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5" + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6" + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa" + } + ] + }, + { + "@id": "_:Nb97582dc84eb41e1aea78c6e5c7640d5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element" + } + ] + }, + { + "@id": "_:N6720587ff9a14662ba139a3cc04633d6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement" + } + ] + }, + { + "@id": "_:N3e856278a9cf4af2badbcdbf73f80ffa", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "affects" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clickthrough" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is used to install software on disk." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "install" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "complete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/context", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "underInvestigationFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "scrapingScript" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoAssertionLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License when no assertion can be made about its actual\nvalue." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/NoAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "reportedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single or a collection of source files." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the value of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amber" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during development phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bower" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relationship is known not to be exhaustive." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "incomplete" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a data package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N56df7be59075471b9d1466398865afdd" + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c" + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861" + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014" + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe" + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40" + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41" + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769" + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b" + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a" + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6" + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581" + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588" + } + ] + }, + { + "@id": "_:N56df7be59075471b9d1466398865afdd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed" + } + ] + }, + { + "@id": "_:N1dede72d56c347b085cf801844a9768c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/amber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/green" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel" + } + ] + }, + { + "@id": "_:Nef779dc58efd41708d2dd810a1c22861", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess" + } + ] + }, + { + "@id": "_:N476942db27384f75af2da9e29db94014", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing" + } + ] + }, + { + "@id": "_:Nd9b0e8688faa4db8bc021fe50af253fe", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/clickthrough" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/scrapingScript" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetAvailability" + } + ] + }, + { + "@id": "_:Nd8b38be0c57d489a82194c062bbe0b40", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise" + } + ] + }, + { + "@id": "_:N5a72932413d2413b80569a5fb2966e41", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize" + } + ] + }, + { + "@id": "_:N5234c2f9e59a42d9867dd1846c82c769", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/categorical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/image" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timeseries" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/video" + } + ] + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType" + } + ] + }, + { + "@id": "_:Na69fc7a1c2654979ada4d85b1717874b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism" + } + ] + }, + { + "@id": "_:Nf208bbcafacb4617ad8ce48ed0c5320a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation" + } + ] + }, + { + "@id": "_:N6bf989b95c5e498e988052131700d5e6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse" + } + ] + }, + { + "@id": "_:N4a0643790ee647d0bf9d75f3f4f80581", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias" + } + ] + }, + { + "@id": "_:N583a7c7011cd4f8383fc2b8c5f308588", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/registration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "registration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is an ancestor of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ancestorOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records a hyperparameter used to build the AI model contained in the AI\npackage." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "no assertion about the type of support is made. This is considered the default if no other support type is used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Organization", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A group of people who work together in an organized way for a shared purpose." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is no longer applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/builtTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was built." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasHost" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's design." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been trained on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trainedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to funding information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "funding" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTestCase" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/noSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is no support for the artifact from the supplier, consumer assumes any support obligations." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies a time when a vulnerability assessment was modified" + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdvisory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Megajoule." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "megajoule" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a module of a piece of software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "module" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional product metadata such as reference within organization's product catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "productMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A distinct article or unit related to Software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9" + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5" + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166" + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6" + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce" + } + ] + }, + { + "@id": "_:N2d5629b576a240eca4cbdd951a693dd9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/primaryPurpose" + } + ] + }, + { + "@id": "_:N0e6424a884214886a5182405c83ce0e5", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/device" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/evidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/firmware" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/install" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/model" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/module" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/requirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/specification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose" + } + ] + }, + { + "@id": "_:Nad16ba6a202e461689abc70b9fcea166", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText" + } + ] + }, + { + "@id": "_:Nbb4d130582c44c00bdc80ffc03d8dde6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText" + } + ] + }, + { + "@id": "_:Nf0f59f499fc84e7cadb021d1e8ba60ce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a License or an OrLaterOperator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "secureSoftwareAttestation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates absence of the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "no" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external reference." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Sbom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements describing a single package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635" + } + ] + }, + { + "@id": "_:N135abe5aa7184697abfa5b1134f74635", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/runtime" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed" + } + ] + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Contains a URL where the License or LicenseAddition can be found in use." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit in which energy is measured." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/catalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99" + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d" + } + ] + }, + { + "@id": "_:N9e907f1b2a0a4dbfa462bb2801f85a99", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType" + } + ] + }, + { + "@id": "_:Na6ee2b8d1d624e21ae8b60f60a68d84d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build system used to create or publish the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/structured", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is stored in tabular format or retrieved from a relational database." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "structured" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the tooling that was used during the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/runtime", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during the execution phase of an element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtime" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the measurement of prediction quality of the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class representing a license combination consisting of one or more licenses." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeclaredLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 9.0 - 10.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "critical" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a version control system related to a software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vcs" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexUnderInvestigationVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates elements as products where the impact of a vulnerability is being\ninvestigated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element contains each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "contains" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element generates each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "generates" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an Extension characterization of some aspect of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOutput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to binary artifacts related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "binaryArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/development", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact is in active development and is not considered ready for formal support from the supplier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "development" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxDocument", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A collection of SPDX Elements that could potentially be serialized." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ElementCollection" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599" + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1" + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47" + } + ] + }, + { + "@id": "_:Nacf93e2dadec4cf5a6eddab055d67599", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/import" + } + ] + }, + { + "@id": "_:Ndf280172f0834544a7759efee893b7d1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap" + } + ] + }, + { + "@id": "_:N8919fac9e03440b19957656e4c6d5f47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A short description of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specified the time and date when a vulnerability was withdrawn." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[FALCON](https://falcon-sign.info/falcon.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "falcon" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the type of an SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/kev", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "CISA's Known Exploited Vulnerability (KEV) Catalog" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kev" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b384" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/deployed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deployed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/archive", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an archived collection of one or more files (.tar, .zip, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "archive" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a privacy assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "privacyAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "serializedInArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/AIPackage", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies an AI package and its associated information." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9" + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c" + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1" + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47" + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2" + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922" + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc" + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6" + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388" + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281" + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195" + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac" + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757" + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba" + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473" + } + ] + }, + { + "@id": "_:N10776ad90ad94042bfd598e68f215ed9", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType" + } + ] + }, + { + "@id": "_:Ncaa9a447e341490894b8ea06dc485a0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain" + } + ] + }, + { + "@id": "_:N49b44a8f36b14012934dd458769db5b1", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption" + } + ] + }, + { + "@id": "_:Nb0a6e8b29d9644ebad6cd2f67f423b47", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/hyperparameter" + } + ] + }, + { + "@id": "_:N61923a50c86b4ba0b8957d6b10968ce2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication" + } + ] + }, + { + "@id": "_:N33bcc4b85bee4aa5a17cdd2efbef8922", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining" + } + ] + }, + { + "@id": "_:Nb79e78a0d55242f68b3169bb1d0ec6bc", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation" + } + ] + }, + { + "@id": "_:N9b28133398a64d5eb219290008f464a6", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metric" + } + ] + }, + { + "@id": "_:N5b173aa6ae6e4f6fbdb84567ce0dd388", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold" + } + ] + }, + { + "@id": "_:N2523b388c8904f2885050ee00d15f281", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing" + } + ] + }, + { + "@id": "_:N25996c4894e1460a8b698f0cbef34195", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability" + } + ] + }, + { + "@id": "_:N2a5d53abe06a466584993d22f4218cac", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/serious" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/low" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment" + } + ] + }, + { + "@id": "_:N96aafef3616e46f882877b2a7e11b757", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance" + } + ] + }, + { + "@id": "_:N39208ce6d6704289bce5a33c713589ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel" + } + ] + }, + { + "@id": "_:Nc36cca07a48048b18bee65bd265e3473", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/yes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/no" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A tuple of two positive integers that define a range." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212" + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d" + } + ] + }, + { + "@id": "_:Ndb15970ce7d34e878a0a7123dad52212", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange" + } + ] + }, + { + "@id": "_:N624418f1db494f7ebe03fa364190d21d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an indication of where to retrieve an external Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a certification report for a package from an accredited/independent body." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "certificationReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of dataset types." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a published list of releases for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseHistory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/simpleLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the simple Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "simpleLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe22" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Person", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An individual human being." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Any other units of energy measurement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a risk assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "riskAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasOptionalDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/NoneLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for License where the SPDX data creator determines that no\nlicense is present." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Licensing/None" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetSize", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the size of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#nonNegativeInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/dataLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the license under which the SPDX documentation of the Element can be\nused." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "urlScheme" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/profileConformance", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes one a profile which the creator of this ElementCollection intends to\nconform to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a test used to verify functionality on an software element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasStaticLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespace", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "foundBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Snippet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a certain part of a file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a" + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7" + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d" + } + ] + }, + { + "@id": "_:Nc849cbed1d4d47158d3a8ce5af53fc2a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange" + } + ] + }, + { + "@id": "_:N26e5d106c3b9457fa387974ed45155a7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/lineRange" + } + ] + }, + { + "@id": "_:N15f27dd5aa464b16b06fd5927807179d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha1" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Other exploit catalogs" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasPrerequisite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cwe" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Kilowatt-hour." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "kilowattHour" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityThreatModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Dilithium](https://pq-crystals.org/dilithium/)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "crystalsDilithium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifier" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/safetyRiskAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the results of general safety risk assessment of the AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the completeness of relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertiesExtension", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A type of extension consisting of a list of name value pairs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0" + } + ] + }, + { + "@id": "_:Na2ab1463e071402b941a055cf25405d0", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceUri", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the URI of the build configuration source file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The result of applying a hash algorithm to an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the documentation for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/application", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "application" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the end of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetUpdateMechanism", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a mechanism to update the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of confidentiality level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/domain", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the domain in which the AI package can be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/gitoid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "gitoid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been copied to each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "copiedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The class that helps note down the quantity of energy consumption and the unit\nused for measurement." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13" + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984" + } + ] + }, + { + "@id": "_:N5c2be488612c4f73abb9b7b35b5a2e13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity" + } + ] + }, + { + "@id": "_:N308fb6485f7d4864923946d7ba83b984", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/kilowattHour" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/megajoule" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType/other" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyUnit" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patchedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a directory and all content stored in that directory." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directory" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/graph", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "graph" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies all the text and metadata associated with a license in the license\nXML format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/core", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Core profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "core" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelExplainability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes methods that can be used to explain the results from the AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a numerical (0-10) representation of the severity of a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is amended by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "amendedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's build phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/text", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "text" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_256" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "nuget" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/ExploitCatalogType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the exploit catalog type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasTest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` archive expands out as an artifact described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandsTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/IndividualLicensingInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a runtime analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "runtimeAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/copyrightText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a static analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "staticAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of a content identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Software Composition Analysis (SCA) report." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an SSVC assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3150b51898a54a30b8c523d53721610a" + } + ] + }, + { + "@id": "_:N3150b51898a54a30b8c523d53721610a", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/decisionType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/bom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a bill of materials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "bom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the safety risk level." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ConjunctiveLicenseSet", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d" + } + ] + }, + { + "@id": "_:Nc21c14ad1d3a4e3ea9fc14563d646d8d", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 2 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/member" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/library", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software library." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "library" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "describes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a generic key-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c" + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1" + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043" + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2" + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147" + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343" + } + ] + }, + { + "@id": "_:N00a4f89addf045d28864aa6380106e8c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/additionText" + } + ] + }, + { + "@id": "_:N5fdc75b020564411a5c638c9aa7169b1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId" + } + ] + }, + { + "@id": "_:N9b30e49ee021458b83b41fb0202c4043", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Nb5ab3d7d4f924cb1be94bf605ee733c2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N11cc93477738430e89e745f56c83f147", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N24687f30f3e64312b787f409644f4343", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/confidentialityLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the confidentiality level of the data points contained in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/act", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "act" + } + ] + }, + { + "@id": "http://spdx.invalid./AbstractClass", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of annotation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasEvidence" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/framework", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software framework." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "framework" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/attend", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "attend" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A key with an associated value." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5" + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3" + } + ] + }, + { + "@id": "_:N1183c95846404f8686047bb384b1fbb5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/key" + } + ] + }, + { + "@id": "_:Ne63e0f50816b4addb79d58c16a81bee3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/value" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element depends on each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dependsOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexNotAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437" + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822" + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9" + } + ] + }, + { + "@id": "_:N8535416071ef432187b8a91ab3a7e437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/inlineMitigationsAlreadyExist" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/justificationType" + } + ] + }, + { + "@id": "_:Nb964a7ec32c84ad9a7e5068cf4f02822", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatement" + } + ] + }, + { + "@id": "_:N33cee511d45243669ca60bd0a0f4a3a9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/impactStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceDigest", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the digest of the build configuration file used to\ninvoke a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract class for the portion of an AnyLicenseInfo representing a license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb" + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7" + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd" + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454" + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9" + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8" + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53" + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0" + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b" + } + ] + }, + { + "@id": "_:N9ebeb1bc85e741fb8d52f00b17dd5edb", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "_:Nefba3a71506d41cfabbc865580be12f7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId" + } + ] + }, + { + "@id": "_:N9539a3aa8f2640ccbf5e3147b95d0acd", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isFsfLibre" + } + ] + }, + { + "@id": "_:Nf71e260bcc9940d2b8cb0fdf962a1454", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved" + } + ] + }, + { + "@id": "_:N722b841e0cc144789cdd7e01a5a50ea9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/licenseXml" + } + ] + }, + { + "@id": "_:Na1a58d858f5445009e4e9c1c79b01ee8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy" + } + ] + }, + { + "@id": "_:N01a7ef65b90c4cf2a2fd910705d3bb53", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/seeAlso" + } + ] + }, + { + "@id": "_:N4c0f1c4516d84ccca992781aa73748b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader" + } + ] + }, + { + "@id": "_:N8aca67d5adb046a18a3855733ab12c9b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseTemplate" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identify the version of a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Conveys information about how VEX status was determined." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "fixedIn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/limitation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a limitation of the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is modified by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "modifiedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 4.0 - 6.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/byteRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the byte range in the original host file that the snippet information\napplies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PositiveIntegerRange" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used to associate a `from` Artifact with each `to` Vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssociatedVulnerability" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Categories of presence or absence." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/medium", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The third-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "medium" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/deviceDriver", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents software that controls hardware devices." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "deviceDriver" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexFixedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "delegatedTo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/limitedSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "limitedSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The product is not affected because the code underlying the vulnerability is not present in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasMetadata" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time when a vulnerability was published." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV3VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 3 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503" + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415" + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d" + } + ] + }, + { + "@id": "_:N92aedbc611024e52983c2e9da6fdb503", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:N96c77573f7d244af98fbb31a9a921415", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:N4d64fe8feb16494b9674f49e196cdb1d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/useSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records if sensitive personal information is used during model training or\ncould be used during the inference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provide consumers with comments by the creator of the Element about the\nElement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the algorithm used for calculating the hash value." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/typeOfModel", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the type of the model used in the AI software." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasInput" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasProvidedDependency" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 7.0 - 8.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/manifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a software manifest." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "manifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element doesn't fit into any of the other categories." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a social media channel for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "socialMedia" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/endOfSupport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "endOfSupport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location for more information regarding an external identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/percentile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The percentile of the current probability score." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Element an annotator has made an assertion about." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/LicenseExpression", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX Element containing an SPDX license expression string." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/AnyLicenseInfo" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a" + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0" + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852" + } + ] + }, + { + "@id": "_:Na0207e8ebb3546d494a226941f26b82a", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseExpression" + } + ] + }, + { + "@id": "_:N33e17640748a455091e7f615156e4be0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N7f4ceb4220154dcc8f61793dbc8c6852", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if a given file is a directory or non-directory kind of file." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PackageVerificationCode", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An SPDX version 2.X compatible verification method for software packages." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c" + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051" + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b" + } + ] + }, + { + "@id": "_:Nfea77563e3c34609b220695df9edc63c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndc9ca13ca7e045a890f1b0f580371051", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "_:N0265fd9255b84ae094abb5c54616ae2b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in an 'or later' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDistributionArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packageUrl" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cve" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/autonomyType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/patch", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element contains a set of changes to update, fix, or improve another Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "patch" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when someone reviews the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "review" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the issue tracker for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "issueTracker" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType/swhid", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "swhid" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/rootElement", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "This property is used to denote the root Element(s) of a tree of elements contained in a BOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References an Element on the right-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS base, temporal, threat, or environmental severity type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildEndTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property that describes the time at which a build stops." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDeletedFile" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Makes no assertion about the field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/diskImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "diskImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c" + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef" + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec" + } + ] + }, + { + "@id": "_:N3d0909f693c34cacbd26067f25a3cd4c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/finetuningEnergyConsumption" + } + ] + }, + { + "@id": "_:N1904cd4ccd84473a8555c9f0885877ef", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/inferenceEnergyConsumption" + } + ] + }, + { + "@id": "_:N6d2410ca374f432183cea69b81c161ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumptionDescription" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/trainingEnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasVariant" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/exploited", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyUnitType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the unit of energy consumption." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an annotation." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "eolNotice" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutApplication", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides relevant information about the AI software, not including the model\ndescription." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the mailing list used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mailingList" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasAssessmentFor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake2b512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicenseAddition", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license addition that is not listed on the SPDX Exceptions List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedAdditionId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether an additional text identifier has been marked as deprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a relationship between one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09" + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4" + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154" + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386" + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee" + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5" + } + ] + }, + { + "@id": "_:Ndaae4f6aabcc43579b940eeb55b7fa09", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from" + } + ] + }, + { + "@id": "_:N1fa9bc1c7b534e18a5a523e72f951ec4", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/to" + } + ] + }, + { + "@id": "_:N4dc4509276114e519a1e36d2339cd154", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/affects" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/amendedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/ancestorOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/contains" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/coordinatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/copiedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/delegatedTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/dependsOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/describes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/expandsTo" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/fixedIn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/foundBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/generates" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAddedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssessmentFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasAssociatedVulnerability" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDataFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeclaredLicense" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDeletedFile" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDistributionArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDocumentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasEvidence" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasExample" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasHost" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasInput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalComponent" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOptionalDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasOutput" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasPrerequisite" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasProvidedDependency" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasRequirement" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasSpecification" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasStaticLink" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTest" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasTestCase" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasVariant" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/invokedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/modifiedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/patchedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/publishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/reportedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/serializedInArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/trainedOn" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/underInvestigationFor" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/usesTool" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/relationshipType" + } + ] + }, + { + "@id": "_:N22a009d8e6fd49afa8d991cf125d3386", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/incomplete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/complete" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness/noAssertion" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/completeness" + } + ] + }, + { + "@id": "_:N9b073a51b7934d96882a3d7b2516e6ee", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:Nfaab51f8ebca452e84e1031a425be7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/endTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicenseException", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license exception that is listed on the SPDX Exceptions list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/LicenseAddition" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne3e78235566445608978be9329e74cc2" + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898" + } + ] + }, + { + "@id": "_:Ne3e78235566445608978be9329e74cc2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N453867a1e4d041d0b9ef358011ed5898", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV2VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 2.0 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e" + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8" + } + ] + }, + { + "@id": "_:N3d0253c9ab6d43bd870cafd49a1aa17e", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Na242505ccf884ef29a794e57c9d3ddc8", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/informationAboutTraining", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes relevant information about different steps of the training process." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is between 0.1 - 3.9" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "low" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all VEX relationships" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6" + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864" + } + ] + }, + { + "@id": "_:Nd696d0bece9045cfa929993fc189dab6", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion" + } + ] + }, + { + "@id": "_:N3989f3d5c22c4cd2b18614b38e4fd864", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/statusNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NoAssertionElement", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Element" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/standardName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The name of a relevant standard that may apply to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to instructions for reporting newly discovered security vulnerabilities for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityPolicy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Availability of dataset." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isDeprecatedLicenseId", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether a license or additional text identifier has been marked as\ndeprecated." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/source", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "source" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the instant messaging system used by the maintainer for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "chat" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded from a physical sensor, such as a thermometer reading or biometric device." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sensor" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/track", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "track" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/republishedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "republishedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/operatingSystem", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an operating system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "operatingSystem" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeCannotBeControlledByAdversary", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeCannotBeControlledByAdversary" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/syntactic", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "syntactic" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/ai", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the AI profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "ai" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the valid profiles." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/from", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "References the Element on the left-hand side of a relationship." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/Package", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any unit of content that can be associated with a distribution of\nsoftware." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1" + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05" + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2" + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2" + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568" + } + ] + }, + { + "@id": "_:N7512c361fa6640a2a2d5027dcca31ae1", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/downloadLocation" + } + ] + }, + { + "@id": "_:N2cbc74620706496aa87fbc369f1b0b05", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/homePage" + } + ] + }, + { + "@id": "_:Ndd62961c42b449c7999ac09e91c55bb2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageVersion" + } + ] + }, + { + "@id": "_:N02637b6a678241cda6ec95b576156ac2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl" + } + ] + }, + { + "@id": "_:N90f6c4f3b60f4279b4188594f640b568", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "blake3" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the security adversary model for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityAdversaryModel" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/container", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a container image which can be used by a container runtime application." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "container" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a License or Addition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an artifact containing the sources for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sourceArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the type of support that is associated with an artifact." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityDisclosureReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/configuration", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is configuration data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configuration" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardLicenseHeader", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a License author's preferred text to indicate that a file is covered\nby the License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the preprocessing steps that were applied to the raw data to create the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssV4VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a CVSS version 4 assessment for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836" + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce" + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f" + } + ] + }, + { + "@id": "_:Nd34755ea58bd4430b6e06edfe49d3836", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/score" + } + ] + }, + { + "@id": "_:Nb9bb8e59941d436cb193d8d8ecd38cce", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/critical" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/high" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/medium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/low" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/severity" + } + ] + }, + { + "@id": "_:Nf9c56978821e4d65b3c9e6089e72244f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/CustomLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies when the Element was originally created." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the patch or source code that fixes a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityFix" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An element of hardware and/or software utilized to carry out a particular function." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vexVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the version of a VEX statement." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerabilityExploitabilityAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/additionalPurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides additional purpose information of the software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the primary purpose of an Element." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType/trackStar", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "trackStar" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative web page." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altWebPage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md2" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha3_224" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/namespaceMap", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/NamespaceMap" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalMap", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5" + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902" + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0" + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff" + } + ] + }, + { + "@id": "_:N642c1242529241e184296a5a0b57d7d5", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalSpdxId" + } + ] + }, + { + "@id": "_:Na075cb0c74ec4575aa5a2c4301d28902", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:N20c73971e3d9412097f90918b0fbd9d0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locationHint" + } + ] + }, + { + "@id": "_:Nbd4cabc421bb46b3977fcf236c7870ff", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d" + }, + { + "@id": "_:N3da1b725121949138220323e55721af3" + }, + { + "@id": "_:N026b410848804fea9d8c504126844111" + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681" + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e" + } + ] + }, + { + "@id": "_:Nc07374747c9448faae0e1e2622db1d7d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" + } + ] + }, + { + "@id": "_:N3da1b725121949138220323e55721af3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N026b410848804fea9d8c504126844111", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/created" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N6d5b2261790642829d74aecc96d7e681", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdBy" + } + ] + }, + { + "@id": "_:N5bfd54b8c91b4551a09ef347685af79e", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Tool" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/createdUsing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/knownBias", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records the biases that the dataset is known to encompass." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/startTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time from which an element is applicable / valid." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/design", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "design" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType/high", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/AI/SafetyRiskAssessmentType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The second-highest level of risk posed by an AI system." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "high" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/packageUrl", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the name of an Element as designated by the creator." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/prefix", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A substitute for a URI." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/exploitCreatedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has had an exploit created against it by each `to` Agent." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exploitCreatedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the VEX justification type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The file represents a single file (default)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "file" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipCompleteness", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to an alternative download location." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "altDownloadLocation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/packageVerificationCodeExcludedFile", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The relative file name of a file to be excluded from the\n`PackageVerificationCode`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/dataset", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Dataset profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dataset" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/dataCollectionProcess", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes how the dataset was collected." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/intendedUse", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes what the given dataset should be used for." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexAffectedVulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexVulnAssessmentRelationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b" + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920" + } + ] + }, + { + "@id": "_:Nf679cce397cb41148e4dbc0de457788b", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatement" + } + ] + }, + { + "@id": "_:N5d88af867062488cb6e9d9d48ff41920", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/actionStatementTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides the location of an external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/lite", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Lite profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "lite" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/timestamp", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "timestamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to metrics related to package such as OpenSSF scorecards." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "metrics" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides an independently reproducible mechanism that permits verification of a specific Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7" + } + ] + }, + { + "@id": "_:N6faa0ec40c2944cc96365e0200f91bc7", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/expandedLicensing", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the expanded Licensing profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "expandedLicensing" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyConsumption", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Indicates the amount of energy consumption incurred by an AI model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/EnergyConsumption" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildType", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "adler32" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides information about the creation of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropName", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A name used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/extension", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Extension profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType/support", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "support" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to the release notes for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "releaseNotes" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/supportLevel", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the level of support associated with an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SupportType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/OrLaterOperator", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N1e10b72106c748bf8326627b02c07313" + } + ] + }, + { + "@id": "_:N1e10b72106c748bf8326627b02c07313", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Build profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VulnAssessmentRelationship", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Abstract ancestor class for all vulnerability assessments" + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Relationship" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50" + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c" + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec" + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba" + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec" + } + ] + }, + { + "@id": "_:N84fbf505fc5b4942809840c744afbc50", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/assessedElement" + } + ] + }, + { + "@id": "_:N9af46730ac5e4549a37713d578ca2c0c", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/publishedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Agent" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/suppliedBy" + } + ] + }, + { + "@id": "_:N30178f0a784c43079551a63b841da0ba", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/modifiedTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "_:N46ba8ef3fde1433dbe3bd4d23fa74fec", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/withdrawnTime" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/vulnerableCodeNotInExecutePath", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The affected code is not reachable through the execution of the code, including non-anticipated states of the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "vulnerableCodeNotInExecutePath" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/SpdxOrganization", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/Organization" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An Organization representing the SPDX Project." + } + ], + "http://www.w3.org/2002/07/owl#sameAs": [ + { + "@id": "https://spdx.org/" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/specVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a reference number that can be used to understand how to parse and\ninterpret an Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the type of the given dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/vectorString", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the CVSS vector string for a vulnerability." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/element", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to one or more Elements that are part of an ElementCollection." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md4" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to related security information of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An entity that is authorized to issue identification credentials." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/standardAdditionTemplate", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Identifies the full text of a LicenseAddition, in SPDX templating format." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType/test", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/LifecycleScopeType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A relationship has specific context implications during an element's testing phase, during development." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "test" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha512" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Information about the relationship between two Elements." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDynamicLink", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDynamicLink" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/query", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "query" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxProperty", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a map of a property names to a values." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/CdxPropertyEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Hash", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematically calculated representation of a grouping of data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8" + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567" + } + ] + }, + { + "@id": "_:Ne452fc8d239747848f49c2ac0d8e39d8", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/adler32" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake2b512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/blake3" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsDilithium" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/crystalsKyber" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/falcon" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md2" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md4" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md5" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha1" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha512" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_224" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_256" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_384" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha3_512" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/algorithm" + } + ] + }, + { + "@id": "_:Ndb4e54e4ff284342bf2f11f51d7f2567", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/hashValue" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/security", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Security profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "security" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/metricDecisionThreshold", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures the threshold that was used for computation of a metric described in\nthe metric field." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A mathematical algorithm that maps data of arbitrary size to a bit string." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/contentIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the content identifier." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/ContentIdentifierType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/sensor", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes a sensor used for collecting the data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a quality assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "qualityAssessmentReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Annotation", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "An assertion made in relation to one or more elements." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb" + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d" + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45" + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda" + } + ] + }, + { + "@id": "_:Nd4b47d4885624e31ab7ede832237afeb", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/AnnotationType/review" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/annotationType" + } + ] + }, + { + "@id": "_:Na183d066b46d4b6e86d08b078d501e3d", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:Ned0fe992065d49dd890483be50cffa45", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement" + } + ] + }, + { + "@id": "_:N401bb3f0ba1b4f84b7db752de9c9ecda", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/subject" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ListedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license that is listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/License" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9" + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3" + } + ] + }, + { + "@id": "_:Nbeb8b7d55cf74321942fb0ae3da5add9", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/deprecatedVersion" + } + ] + }, + { + "@id": "_:N7136c79627a74cbabf5f99227a8c06d3", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a purchase order for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "purchaseOrder" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/parameter", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing a parameter used in an instance of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType/none", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/CvssSeverityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "When a CVSS score is 0.0" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "none" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Nba7479035af442ada086c0338c451097" + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78" + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f" + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355" + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493" + } + ] + }, + { + "@id": "_:Nba7479035af442ada086c0338c451097", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe22" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cve" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/gitoid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/packageUrl" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swhid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/swid" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/urlScheme" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifierType" + } + ] + }, + { + "@id": "_:Ne0351ee38a2940df9a643908f3c04c78", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier" + } + ] + }, + { + "@id": "_:N24fab7059f894755bb21ef4ddc4d0f4f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N8aeda8c772e348afb93afc3dc5457355", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#anyURI" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifierLocator" + } + ] + }, + { + "@id": "_:Nb831ba68859845819894bc24124f2493", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/issuingAuthority" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/SimpleLicensingText", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A license or addition that is not listed on the SPDX License List." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N48a995c812d240c8991c7af527062228" + } + ] + }, + { + "@id": "_:N48a995c812d240c8991c7af527062228", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseText" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/beginIntegerRange", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the beginning of a range." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#positiveInteger" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasConcludedLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasConcludedLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of an external identifier." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/subjectExtendableLicense", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A License participating in a 'with addition' model." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/ExtendableLicense" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/cpe23", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "cpe23" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/executable", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is an Artifact that can be run on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "executable" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/modelDataPreprocessing", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes all the preprocessing steps applied to the training data before the\nmodel training." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is of a type not included in this list." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Element", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://spdx.invalid./AbstractClass", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Base domain class from which all other SPDX-3.0 domain classes derive." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404" + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f" + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac" + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786" + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76" + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437" + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739" + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33" + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c" + } + ] + }, + { + "@id": "_:Na063ca2df3034db0bf1b8b898aa3a404", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/name" + } + ] + }, + { + "@id": "_:N6c6d7f192a574d27bdc34c9ab2cafe1f", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/summary" + } + ] + }, + { + "@id": "_:N4daef40acaac487baa5fb20c0fd627ac", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description" + } + ] + }, + { + "@id": "_:N53d06bdaf9464b0fbd454088aee08786", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "_:N2ceaa2ca925c4e80b9d615666e91bb76", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/CreationInfo" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#minCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/creationInfo" + } + ] + }, + { + "@id": "_:N4e8eb71dd7554ffe97d6bf2fb08a5437", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/IntegrityMethod" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/verifiedUsing" + } + ] + }, + { + "@id": "_:Ncc31c01eeda0480ea00ea96b0f811739", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRef" + } + ] + }, + { + "@id": "_:N617bdae809f549f9b84e4c71b02ccd33", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifier" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalIdentifier" + } + ] + }, + { + "@id": "_:N164dbad8168a495a98820f4a532bad8c", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/Extension" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNodeOrIRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/extension" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType/software", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ProfileIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the element follows the Software profile specification" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "software" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bom", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Bundle" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/email", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "email" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/noAssertion", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data type is not known." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "noAssertion" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType/directDownload", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetAvailabilityType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "the dataset is publicly available and can be downloaded directly." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "directDownload" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/customIdToUri", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/DictionaryEntry" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType/componentNotPresent", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Security/VexJustificationType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The software is not affected because the vulnerable component is not in the product." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "componentNotPresent" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a export control assessment for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "exportControlAssessment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/datasetNoise", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes potentially noisy elements of the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/hasSensitivePersonalInformation", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes if any sensitive personal information is present in the dataset." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/PresenceType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/snippetFromFile", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Defines the original host file that the snippet information applies to." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to additional license information related to an artifact." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "license" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/data", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is data." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "data" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/releaseTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the time an artifact was released." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/File", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Refers to any object that stores content on a computer." + } + ], + "http://www.w3.org/2000/01/rdf-schema#subClassOf": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwareArtifact" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13" + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7" + } + ] + }, + { + "@id": "_:Na4c9815bb1c74163aad85a1b13e04f13", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N645cfb9d3c334cc1a3175307175364c7", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/file" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType/directory" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/fileKind" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/configures", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "configures" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/description", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a detailed description of the Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/SsvcDecisionType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SSVC decision type." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/md6", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "md6" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/red", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Data points in the dataset are highly confidential and can only be shared with named recipients." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "red" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the type of the external reference." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/identifier", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Uniquely identifies an external element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Extension/cdxPropValue", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A value used in a CdxPropertyEntry name-value pair." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/filesystemImage", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is a file system image that can be written to a disk (or virtual) partition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "filesystemImage" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/documentation", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element is documentation." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "documentation" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/obsoletedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/analyzed", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "analyzed" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/definingArtifact", + "@type": [ + "http://www.w3.org/2002/07/owl#ObjectProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/Artifact" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/descendantOf", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is a descendant of each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "descendantOf" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/standardCompliance", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Captures a standard that is being complied with." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType/clear", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/ConfidentialityLevelType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Dataset may be distributed freely, without restriction." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "clear" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/audio", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data is audio based, such as a collection of music from the 80s." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "audio" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/attributionText", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Security/probability", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A probability score between 0 and 1 of a vulnerability being exploited." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRef", + "@type": [ + "http://www.w3.org/2002/07/owl#Class", + "http://www.w3.org/ns/shacl#NodeShape" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a resource outside the scope of SPDX-3.0 content related to an Element." + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#BlankNode" + } + ], + "http://www.w3.org/ns/shacl#property": [ + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004" + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71" + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0" + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2" + } + ] + }, + { + "@id": "_:N872f874bf6a643fb922cfeb84da33004", + "http://www.w3.org/ns/shacl#class": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + } + ], + "http://www.w3.org/ns/shacl#in": [ + { + "@list": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altDownloadLocation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/altWebPage" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/binaryArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/bower" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildSystem" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/chat" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/certificationReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/componentAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/cwe" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/documentation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/eolNotice" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/exportControlAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/funding" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/issueTracker" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mailingList" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/metrics" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/npm" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/nuget" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/license" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/privacyAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/productMetadata" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/purchaseOrder" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/qualityAssessmentReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseNotes" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/releaseHistory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/riskAssessment" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/runtimeAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/secureSoftwareAttestation" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdvisory" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityAdversaryModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityFix" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityOther" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPenTestReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityPolicy" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/securityThreatModel" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/socialMedia" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/sourceArtifact" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/staticAnalysisReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/support" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vcs" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityDisclosureReport" + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/vulnerabilityExploitabilityAssessment" + } + ] + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#IRI" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/externalRefType" + } + ] + }, + { + "@id": "_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/locator" + } + ] + }, + { + "@id": "_:N056b619290c944b1b9efec2e986869b0", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/contentType" + } + ], + "http://www.w3.org/ns/shacl#pattern": [ + { + "@value": "^[^\\/]+\\/[^\\/]+$" + } + ] + }, + { + "@id": "_:N8a427ef4e2c34b2980a778d817ac3ca2", + "http://www.w3.org/ns/shacl#datatype": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ], + "http://www.w3.org/ns/shacl#maxCount": [ + { + "@type": "http://www.w3.org/2001/XMLSchema#integer", + "@value": 1 + } + ], + "http://www.w3.org/ns/shacl#nodeKind": [ + { + "@id": "http://www.w3.org/ns/shacl#Literal" + } + ], + "http://www.w3.org/ns/shacl#path": [ + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/comment" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/dynamicAnalysisReport", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a dynamic analysis report for a package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "dynamicAnalysisReport" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/availableFrom", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element is available from the additional supplier described by each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "availableFrom" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/sourceInfo", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Records any relevant background information or additional comments\nabout the origin of the package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/packagedBy", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "packagedBy" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/mavenCentral", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "mavenCentral" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType/securityOther", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalIdentifierType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when there is a security related identifier of unspecified type." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "securityOther" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "any hashing algorithm that does not exist in this list of entries" + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose/platform", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SoftwarePurpose" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The Element represents a runtime environment." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "platform" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/configSourceEntrypoint", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describes the invocation entrypoint of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/SimpleLicensing/licenseListVersion", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The version of the SPDX License List used in the license expression." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/isOsiApproved", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#boolean" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/FileKindType", + "@type": [ + "http://www.w3.org/2002/07/owl#Class" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Enumeration of the different kinds of SPDX file." + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/doesNotAffect", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "doesNotAffect" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/ExpandedLicensing/listVersionAdded", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/buildMeta", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "A reference build metadata related to a published package." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "buildMeta" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/testedOn", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has been tested on the `to` Element(s)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "testedOn" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Software/SbomType/build", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Software/SbomType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "build" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/validUntilTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Specifies until when the artifact can be used before its usage needs to be\nreassessed." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/anonymizationMethodUsed", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Describes the anonymization methods used." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType/numeric", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Dataset/DatasetType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "data consists only of numeric entries." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "numeric" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType/hasDependencyManifest", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/RelationshipType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "The `from` Element has manifest files that contain dependency information in each `to` Element." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "hasDependencyManifest" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/statement", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Commentary on an assertion that an annotator has made." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#string" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType/other", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/ExternalRefType" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Used when the type does not match any of the other options." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "other" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Build/buildStartTime", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Property describing the start time of a build." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#dateTimeStamp" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/AI/energyQuantity", + "@type": [ + "http://www.w3.org/2002/07/owl#DatatypeProperty" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "Represents the energy quantity." + } + ], + "http://www.w3.org/2000/01/rdf-schema#range": [ + { + "@id": "http://www.w3.org/2001/XMLSchema#decimal" + } + ] + }, + { + "@id": "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm/sha224", + "@type": [ + "http://www.w3.org/2002/07/owl#NamedIndividual", + "https://spdx.org/rdf/3.0.1/terms/Core/HashAlgorithm" + ], + "http://www.w3.org/2000/01/rdf-schema#comment": [ + { + "@language": "en", + "@value": "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)." + } + ], + "http://www.w3.org/2000/01/rdf-schema#label": [ + { + "@value": "sha224" + } + ] + } +] \ No newline at end of file diff --git a/v3.0/rdf/spdx-model.longturtle b/v3.0/rdf/spdx-model.longturtle new file mode 100644 index 0000000000..4fbc580f70 --- /dev/null +++ b/v3.0/rdf/spdx-model.longturtle @@ -0,0 +1,5355 @@ +PREFIX dcterms: +PREFIX omg-ann: +PREFIX owl: +PREFIX rdf: +PREFIX rdfs: +PREFIX sh: +PREFIX spdx: +PREFIX xsd: + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs ; +. + + + a + owl:NamedIndividual , + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + +spdx: + a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en ; +. + + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en ; +. + + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ; +. + + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ; +. + + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string ; +. + + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en ; +. + + + a + owl:NamedIndividual , + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal ; +. + + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:class ; + sh:in ( + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:in ( + + + + + + + + ) ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en ; +. + + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:class ; + sh:in ( + + + + ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en ; +. + + + a owl:Class ; + rdfs:comment "Availability of dataset."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ; + ] , + [ + sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en ; +. + + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en ; +. + + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en ; +. + + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en ; +. + + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a + , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; +. + + + a owl:Class ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en ; +. + + + a + owl:Class , + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en ; +. + + + a + , + owl:Class , + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + ] , + [ + sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ; + ] ; +. + + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en ; +. + + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en ; +. + + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en ; +. + + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en ; +. diff --git a/v3.0/rdf/spdx-model.n3 b/v3.0/rdf/spdx-model.n3 new file mode 100644 index 0000000000..cf71d41951 --- /dev/null +++ b/v3.0/rdf/spdx-model.n3 @@ -0,0 +1,3260 @@ +@prefix dcterms: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + = . + + a owl:NamedIndividual, + ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + = . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range . + + a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range . + + a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range . + + a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a , + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a , + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + a owl:Class . + + a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + a , + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:class ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + + a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0/rdf/spdx-model.nt b/v3.0/rdf/spdx-model.nt new file mode 100644 index 0000000000..269ac65680 --- /dev/null +++ b/v3.0/rdf/spdx-model.nt @@ -0,0 +1,3486 @@ + "A concrete subclass of AnyLicenseInfo used by Individuals in the\nExpandedLicensing profile."@en . +_:N2caaec60ce124c8091e058eea48622ba . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:N135abe5aa7184697abfa5b1134f74635 . +_:N5dc7ad7b328945158bb2c61ac16e194c . + "republishedBy" . + _:N7512c361fa6640a2a2d5027dcca31ae1 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + "Identify the version of a package."@en . + . + . + "A property name with an associated value."@en . + . + "A reference to a runtime analysis report for a package."@en . +_:N093bbb61d9594baa8b978ad303aad6af . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 _:Nba1a37de924c499f9ea9e93d8961d20a . +_:N51cddf68303a476d955b87917202ff31 . + _:Ndf280172f0834544a7759efee893b7d1 . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 . +_:N95c3ead21e6e4ecd95af23263451b25e . + "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . +_:Nba1a37de924c499f9ea9e93d8961d20a . + "Provides the location for more information regarding an external identifier."@en . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . +_:N2523b388c8904f2885050ee00d15f281 . + "license" . + . +_:N30178f0a784c43079551a63b841da0ba . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 _:N844378f645c04baba1e77ba4c91a005c . + "socialMedia" . +_:Neb7d9e3129e841ffba55cfcffa695a61 _:N08c151d77c034260b733a9cd4fb2db47 . +_:Naf98619f104747d192028a17f0ecd8bb _:N4c52d9d036934841b17eac13b27a39f8 . + . + . + . + "Captures a standard that is being complied with."@en . + . + . + "Abstract class for the portion of an AnyLicenseInfo representing a license."@en . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N7c577594e1734b4ebabc9b18761d5162 . + . + _:N8919fac9e03440b19957656e4c6d5f47 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . +_:Nef779dc58efd41708d2dd810a1c22861 "1"^^ . +_:Ne25f494d3fbc45bfae592617345de5db . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nc07374747c9448faae0e1e2622db1d7d . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + . + . +_:N6e64ceb369f04614bd3449d6d9bea0d1 . + . + "attend" . +_:Nbfc53449413c4390876a7291e180ba07 . + "The Element provides a requirement needed as input for another Element."@en . + "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . +_:N9b073a51b7934d96882a3d7b2516e6ee . + . + _:N453867a1e4d041d0b9ef358011ed5898 . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N681b535a77a04528a517054508bb1c40 . + . + "exportControlAssessment" . +_:N2f0b2a4ea3614cf4a1d12c296f86812e _:N3b580065725749b7ab5e332a55260a05 . + . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N604da09912b74a828b98bb6b28fbf0a7 _:N0530f2e80adb4606aeaa0ee0c0b381af . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Na5ef2f7d581a4fbeab399f28f36514fc _:Nefb954041ff74e1c981f465bcaab5d3b . + . + . + "Describes how the dataset was collected."@en . + "Specifies the amount of energy consumed during inference time by an AI model\nthat is being used in the AI system."@en . +_:N331685f17119458e9f8d03e1032a587d . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + "A reference to the security adversary model for a package."@en . + . + . +_:N308fb6485f7d4864923946d7ba83b984 _:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N41bfdb0844834a9296a04a2b771b30d7 . + _:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nefba3a71506d41cfabbc865580be12f7 . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:N24390832561247ea9edbcfeca24f67aa . +_:N3da1b725121949138220323e55721af3 . + . + . + . +_:N45d29e6a8f964d629bcfd38e8a2812df _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Provides a CVSS version 3 assessment for a vulnerability."@en . + "A reference to the documentation for a package."@en . +_:N3c78df17f57a45d7b66ef27d1d0b60be _:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N135abe5aa7184697abfa5b1134f74635 . + . +_:N6e67e553547e4413a6ba103a34e16d88 _:N4b9123c429a143928240efffd877c09e . + . + . +_:N308fb6485f7d4864923946d7ba83b984 . + "nuget" . +_:Nb121f71437a9448ab9d30679e6c6e290 _:Ne74d9ee0343b4b299f81fa823f3baa12 . + . +_:N844378f645c04baba1e77ba4c91a005c . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd72eee1dacf14634b4ccb3f926804521 _:N402019128a2449e3b5be3f04ec1f62f4 . +_:Ndb15970ce7d34e878a0a7123dad52212 . +_:Nf562af8defe04dbc89db49905f399a11 _:N5db3bc3ac4ca4493a796356af601403e . + . + . + _:N804dd6908e264d10be7ab47179d84223 . + . + _:N308fb6485f7d4864923946d7ba83b984 . +_:Nce1c9f7707b749df9c04405465f5d693 . +_:N2a5d53abe06a466584993d22f4218cac "1"^^ . + "support" . +_:N9af46730ac5e4549a37713d578ca2c0c . +_:Ne3e78235566445608978be9329e74cc2 "1"^^ . + . +_:N3a5f5817b005498690770268a7749990 . + "The Element is a test used to verify functionality on an software element."@en . + . +_:N3d0909f693c34cacbd26067f25a3cd4c . + "doesNotAffect" . +_:Nfea77563e3c34609b220695df9edc63c . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + "Specifies whether the License is listed as approved by the\nOpen Source Initiative (OSI)."@en . + . + "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nf4e6c1ca88814f8983b689a6d618c839 _:N69eefd6c115c4499be60a56a329082ed . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:Nf07f4220a2fd47bea00636caef099680 . + . +_:N3e856278a9cf4af2badbcdbf73f80ffa . +_:Na084b549fa4a46ef9c69e235fea6cfdf . + "bower" . +_:Ne71793c1d96b4398876c3fddfc0f543d . + "A key used in a generic key-value pair."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 . + "platform" . +_:N96c77573f7d244af98fbb31a9a921415 . + "Indicates whether the system can perform a decision or action without human\ninvolvement or guidance."@en . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "1"^^ . + _:N3e856278a9cf4af2badbcdbf73f80ffa . + "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . +_:N6d5b2261790642829d74aecc96d7e681 . +_:N22a009d8e6fd49afa8d991cf125d3386 _:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . +_:N1e65c28f50ca472e8d766dd913f3ecc1 _:Ne3c684285049449e9ee58f318c943f4f . +_:N49b44a8f36b14012934dd458769db5b1 "1"^^ . + . + "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . +_:N8535416071ef432187b8a91ab3a7e437 . +_:N897103c5db374d44a639af1692f596b0 _:Nc1f593d31b694f8d899bab4cfafbc332 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nfbb90564d62a49c99f3ad124bf572c0a . + . + . +_:N02216a682b174628b5883d37733d43f4 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + "Used when the type does not match any of the other options."@en . + "hasPrerequisite" . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "incomplete" . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + . + "A class for describing the energy consumption incurred by an AI model in\ndifferent stages of its lifecycle."@en . + "none" . + . + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:Nb29082bbf3a54faf833061815ecea3cd . +_:Nb09aae7f35a946528a44d9a113f868cb _:N7ce5215fd77b4391bb0faf9a289c9651 . + . +_:Nba7479035af442ada086c0338c451097 . + . + . + . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 _:N7c00958b8c7c491d82e976dea47764ee . + "A type of extension consisting of a list of name value pairs."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e "1"^^ . + . + "Identifies the full text of a License or Addition."@en . + . + . +_:N83380edfda0143559b20b6f86b17c17a . + . + "The `from` Element generates each `to` Element."@en . + _:N00a4f89addf045d28864aa6380106e8c . + . + "A mathematically calculated representation of a grouping of data."@en . + "Records a hyperparameter used to build the AI model contained in the AI\npackage."@en . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 _:Nd25a98977037415f94236e4881c554c0 . + "image" . +_:N6ecbea142a87482db61924a78444a2e7 _:Nd72eee1dacf14634b4ccb3f926804521 . +_:N6383d37e157d4dffb5f82a27d885c7b8 . + _:N2d5629b576a240eca4cbdd951a693dd9 . +_:N19bf11d3eb754e10bd676b9b7780555e _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + . +_:N4570847561a247b190684fe248fa523f _:N51cddf68303a476d955b87917202ff31 . + . + "Base domain class from which all other SPDX-3.0 domain classes derive."@en . +_:N8535416071ef432187b8a91ab3a7e437 _:N0525f39f8ddf4826a2a11f9086af43f8 . + "evidence" . + . + . + _:Nd9b0e8688faa4db8bc021fe50af253fe . + . + . + "Specifies the type of an external reference."@en . + "syntactic" . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . + . + _:N9ebeb1bc85e741fb8d52f00b17dd5edb . + "Information about the relationship between two Elements."@en . + "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "The `from` Element is a descendant of each `to` Element."@en . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 _:N50272c7539ef4c818bf3bccae2d7a4e7 . + . + "email" . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + "securityPolicy" . + . + . + . +_:Nac7de1144825418b96a3c43ff6d678a6 _:Ncc8fbdb6574b455aa71ca75a347cd39f . + "A reference build metadata related to a published package."@en . + _:Na242505ccf884ef29a794e57c9d3ddc8 . +_:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Ne71793c1d96b4398876c3fddfc0f543d . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N5cdabdb752694f1c9a65db2083a57b66 . + "Capture the scope of information about a specific relationship between elements."@en . + _:N583a7c7011cd4f8383fc2b8c5f308588 . + . +_:N0725b77584894b4c82b93fc68df0a45d . + "Describes the confidentiality level of the data points contained in the dataset."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 "1"^^ . + "A reference to the patch or source code that fixes a vulnerability."@en . + . + "securityAdversaryModel" . + . + . + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:N10776ad90ad94042bfd598e68f215ed9 _:Na71e0164a5d7491f82b21b32a559f2a4 . + . +_:N0039cd20d11f4e1eb92b14040fe9d2ab _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + . +_:N722b841e0cc144789cdd7e01a5a50ea9 "1"^^ . +_:N645cfb9d3c334cc1a3175307175364c7 . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies a time when a vulnerability assessment was modified"@en . + . + . +_:Nabf8267e85fe497f80f96eaecb2a8ecc . +_:N6cb4c4347f154af1b5c9d61bdb1d6485 _:Ne36b98993a6a41abaca571a82d61050c . + "A distinct article or unit related to Software."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 _:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Nc36cca07a48048b18bee65bd265e3473 . + "Portion of an AnyLicenseInfo representing this version, or any later version,\nof the indicated License."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + . + . + . +_:Ncf95e811579f435d8190022c27ddc51e . +_:N53e150822c694617a126e0d67cfe88d2 . +_:N7c00958b8c7c491d82e976dea47764ee . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + . + . +_:N0d74c19737464f18adb7fb9e70490836 . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . +_:N60b7e732109b4d57a2174a1793e81730 _:Nb8f515d8797c45b7894e3e707f5223fd . + "audio" . + "Provides the license under which the SPDX documentation of the Element can be\nused."@en . + . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + "A reference to a version control system related to a software artifact."@en . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N26e5d106c3b9457fa387974ed45155a7 . + "descendantOf" . +_:Ne36b98993a6a41abaca571a82d61050c . +_:N12791c5f96074c62a3ed255af776b87b _:N01b35060833a487b8f68dd5852fb7128 . + _:N6720587ff9a14662ba139a3cc04633d6 . + "The `from` archive expands out as an artifact described by each `to` Element."@en . +_:N3b580065725749b7ab5e332a55260a05 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:N6841333db1c2440083b2a1e012968a62 . +_:N3e5fc4328f364305a1c66fdd7534c881 . + "device" . + "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + . + . + "Identifies who or what supplied the artifact or VulnAssessmentRelationship\nreferenced by the Element."@en . + . + . +_:N5cdabdb752694f1c9a65db2083a57b66 _:N6383d37e157d4dffb5f82a27d885c7b8 . +_:N5484226f71e247459aecae3701f31924 . +_:N8e9938cc2a3c4da9abce340cca712edd _:N1f1d4556eef644b9976392b54821e832 . +_:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . +_:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 "1"^^ . +_:Nce1c9f7707b749df9c04405465f5d693 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N9ef78d5edabf4efbb280aa669f60517d . +_:N8e015961b7e9410e98c4287ad1a58ebb . + . + "A reference to the issue tracker for a package."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . + . + . + "Portion of an AnyLicenseInfo representing a set of licensing information where\nonly one of the elements applies."@en . +_:N5facf933623c4898a775e670cb057eef _:N3d49f1697b79484bb086d05ff0857eec . +_:N804dd6908e264d10be7ab47179d84223 . + "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + "A reference to related security information of unspecified type."@en . + "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + "specification" . + "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . +_:N2bf58c59d4e345bd92c2c66da13d5577 "1"^^ . +_:N00a4f89addf045d28864aa6380106e8c . +_:N67676f11ca184c05a0d5f6249a4b14fa "1"^^ . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . +_:Ne0ead3de0c1842e8803711c778d3de8f _:Nfe7bb70385ba4334afb3dd58e4476443 . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . +_:N92b9f222f5b94268a55c169346f957f1 . +_:N8737dc2b1bd6408b852d2324c6ce404e _:N575fe651e76242bf8d3db482154b8fae . +_:Nbd5d22a16c594086a7dab4ce2199d3be . + "Abstract class representing a License or an OrLaterOperator."@en . +_:N08c151d77c034260b733a9cd4fb2db47 . + "A reference to the mailing list used by the maintainer for a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + _:N15f27dd5aa464b16b06fd5927807179d . +_:N6d5b2261790642829d74aecc96d7e681 . + . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + "the element follows the Software profile specification"@en . +_:N5facf933623c4898a775e670cb057eef . + "md2" . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . + "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + "Specifies whether the License is listed as free by the\nFree Software Foundation (FSF)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + "modifiedBy" . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 _:N88d076d5560e44378fc63f2196d3e9be . + . + . + _:Nb9bb8e59941d436cb193d8d8ecd38cce . + "A license that is not listed on the SPDX License List."@en . + "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + "The software is not affected because the vulnerable component is not in the product."@en . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 _:Na7d9beb4671848ceafe78da042cf29b8 . + . + . + "A reference to an artifact containing the sources for a package."@en . + . + "The Element provides low level control over a device's hardware."@en . + . +_:N2c94076e809942598a2c483d17eddfc7 . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + _:N9539a3aa8f2640ccbf5e3147b95d0acd . + . + "buildSystem" . + . +_:N872f874bf6a643fb922cfeb84da33004 "1"^^ . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . + . +_:N50272c7539ef4c818bf3bccae2d7a4e7 _:N2caaec60ce124c8091e058eea48622ba . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . + . +_:N56df7be59075471b9d1466398865afdd . + _:N96aafef3616e46f882877b2a7e11b757 . + "Specified the time and date when a vulnerability was withdrawn."@en . +_:N2c94076e809942598a2c483d17eddfc7 . + . + . +_:N8535416071ef432187b8a91ab3a7e437 . + . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:N5d7b7ab80ba94da78154e51e39f4b55d _:N95a2e8e0514048c496ba86d6678afb52 . + "gitoid" . +_:N18770e9733c8452f9533b746b1378584 _:N750e6ba1e1744f44956807fd65a5a4f7 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + . +_:Nd6035645b90646908c1881b4d968ce2e _:Ne55baec5fd904832ad3e305685422c87 . +_:Nefba3a71506d41cfabbc865580be12f7 "1"^^ . + . +_:N30178f0a784c43079551a63b841da0ba "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfea77563e3c34609b220695df9edc63c . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . +_:Nf4e6c1ca88814f8983b689a6d618c839 . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "securityThreatModel" . + "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + . + "Provides additional purpose information of the software artifact."@en . + _:Nb79e78a0d55242f68b3169bb1d0ec6bc . + _:Na075cb0c74ec4575aa5a2c4301d28902 . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:Na183d066b46d4b6e86d08b078d501e3d . + . + . + _:Nfea77563e3c34609b220695df9edc63c . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + . +_:N28454dc7d61d47bd9f19e037f20819ed _:N4b172a1a115b4973a390eec846d3cadb . + . + "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + . + . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 . + "Defines the byte range in the original host file that the snippet information\napplies to."@en . + "the dataset is publicly available and can be downloaded directly."@en . + "extension" . + . +_:N64aa778e8d414bb58cc29d8a040aa5b5 . +_:N331685f17119458e9f8d03e1032a587d . + . + "hasDeletedFile" . + _:Na183d066b46d4b6e86d08b078d501e3d . + . + . + . + . + _:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N7265cf39508f4d7d8064b01c6fc7af91 . + _:N90f6c4f3b60f4279b4188594f640b568 . +_:Nd4b47d4885624e31ab7ede832237afeb . + "Specifies the value of the content identifier."@en . + "Identifies when the Element was originally created."@en . + . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:N21bd6927f63f42d79efcc4dad7881e53 _:Na8d8ac54c0434708b78fe73a4d8e0660 . + "The relationship is known to be exhaustive."@en . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "hasAssociatedVulnerability" . +_:N5a72932413d2413b80569a5fb2966e41 . + "Describes if any sensitive personal information is present in the dataset."@en . + . + . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 . +_:N3da1b725121949138220323e55721af3 . +_:N21bd6927f63f42d79efcc4dad7881e53 . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:N9a16803acd9b4de0a606f5c7ca338d46 . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nb8f515d8797c45b7894e3e707f5223fd . + "The `from` Element has been tested on the `to` Element(s)."@en . + . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . +_:Neea78b34b53645d9b977d4dafb032fbb _:Ne30781691aca482680ffd9bbd2045c91 . +_:N9b9a98064ff244dab80a08bdd5555d88 . + . + "The result of applying a hash algorithm to an Element."@en . +_:N401bb3f0ba1b4f84b7db752de9c9ecda "1"^^ . +_:N8a3126cc6d804604930d39f15a0a7954 _:Ne1807e7da3dc42d8921080afa2df652f . + "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N53e150822c694617a126e0d67cfe88d2 _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N4dc4509276114e519a1e36d2339cd154 . + "the element follows the Extension profile specification"@en . + _:N20c73971e3d9412097f90918b0fbd9d0 . +_:N600baa7cc72e418cac29838b2bb675b8 _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + . + . + _:N5bfd54b8c91b4551a09ef347685af79e . + "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + . + "Provides an SSVC assessment for a vulnerability."@en . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 _:N0e2779bcf1bd430f8f30fa6286429aa8 . +_:N1732034f40cb4a83b62ae814a97635b1 _:N18770e9733c8452f9533b746b1378584 . +_:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Na183d066b46d4b6e86d08b078d501e3d "^[^\\/]+\\/[^\\/]+$" . + . + . + . + "A reference to a export control assessment for a package."@en . + _:N1fa9bc1c7b534e18a5a523e72f951ec4 . + "Property describes the invocation entrypoint of a build."@en . + "scrapingScript" . + "the element follows the AI profile specification"@en . + . + . + . +_:N8d9932eb554044d69adb3585d42ac4a4 . +_:Nfbb90564d62a49c99f3ad124bf572c0a _:N907869d713e3425588796c37fb9c49c1 . +_:N1411c3ed7f0d479e9873248eb22f62f2 . + . + _:N8aeda8c772e348afb93afc3dc5457355 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 . +_:Nf34b3b1798cd4b95ad7460d818440421 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + . +_:N0358c2cacfaf495e9338bfa0ec064165 . +_:Nb3d9d9553ea04f749108d2000dfc3953 _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . +_:N43b644328d464248beda66a9dc1b24f0 . +_:N5ff41cce72fe443c82fe25e80c38d155 _:Nb30a287d827e4316be15597c73c84fef . + . + . + "securityOther" . + "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . +_:N4c0f1c4516d84ccca992781aa73748b0 "1"^^ . +_:N1288fc1d432c42e3a6691ec85b15b7f5 _:N6ecbea142a87482db61924a78444a2e7 . + . +_:Nd498732042494722ac01f812b9752e13 _:Nb09aae7f35a946528a44d9a113f868cb . +_:N624418f1db494f7ebe03fa364190d21d . + "Explains why a VEX product is not affected by a vulnerability. It is an\nalternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable\njustification label."@en . + "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . +_:N6383d37e157d4dffb5f82a27d885c7b8 _:N388a67e4decf423d92132d6f8ca8791d . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:Nbc8ad111179e4d28aeca12d049d01869 _:N604da09912b74a828b98bb6b28fbf0a7 . + . + "Specifies the time when a vulnerability was published."@en . + "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . +_:Nb757eb766bcf484dab7fcc8640520f26 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d "1"^^ . + . +_:N9af46730ac5e4549a37713d578ca2c0c . + "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en . + "hasSpecification" . +_:Nf679cce397cb41148e4dbc0de457788b "1"^^ . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + . +_:Na6e92abe54d446e79e8c88579ac830f2 . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + "Records the type of the model used in the AI software."@en . +_:N9af46730ac5e4549a37713d578ca2c0c . + . + . + . + "Used when someone reviews the Element."@en . +_:N5dc3284b65a24ff69bef8bb7c2950f40 _:N2aad1aae2d3f47e8b136b6be47eab335 . + "hasConcludedLicense" . + "adler32" . +_:N349791578bd441d7b8f76b4673275235 _:N0358c2cacfaf495e9338bfa0ec064165 . + "A reference to the software support channel or other support information for a package."@en . + "The file represents a single file (default)."@en . + . + . + . + . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . +_:Nf91d5c31a6274b259ae9d3da7de37c4d _:N349791578bd441d7b8f76b4673275235 . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N5546070c54224ce482c3cbd8b3c5d898 . + "Provides information about the primary purpose of the software artifact."@en . +_:N0eee4677557545a6b9165efd2364e418 _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . +_:N81e9711becff48eaa08e25e5b6fea9c9 . +_:N3aae1ae126af41909469c96ead6b6227 . + _:N476942db27384f75af2da9e29db94014 . + . +_:N1dafd5bc3b6040e490dfb6830c66802d . + "The Element is a software library."@en . +_:N11d2469065ae40ba876541501b6ad701 _:N4e66507395a34b13854c4b51db14e6c1 . + _:N92aedbc611024e52983c2e9da6fdb503 . +_:N92311b1b08cb437aaea5bc0c25bf4b50 . + "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . + "Portion of an AnyLicenseInfo representing a set of licensing information\nwhere all elements apply."@en . + "hasEvidence" . +_:N2cbc74620706496aa87fbc369f1b0b05 "1"^^ . + . + . +_:N4b172a1a115b4973a390eec846d3cadb _:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N056b619290c944b1b9efec2e986869b0 . + "Provides information about the type of an SBOM."@en . + . + "Specifies the exploit catalog type."@en . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N2ad096761e3044fcb326834ae006af13 . + . + _:N6d2410ca374f432183cea69b81c161ec . + . +_:N218b2297f9704d99bf1b9e818945ce5c _:Nd498732042494722ac01f812b9752e13 . + _:N056b619290c944b1b9efec2e986869b0 . + "support" . +_:N6a47af8674814d9a92314ce9c053556a _:N0d74c19737464f18adb7fb9e70490836 . + "A buildId is a locally unique identifier used by a builder to identify a unique\ninstance of a build produced by it."@en . + "A reference to a published list of releases for a package."@en . + "hasOutput" . + . + . + . +_:Ncaa9a447e341490894b8ea06dc485a0c . + . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N5f901838dbd947f0aef2c3a4486db889 _:N2f0b2a4ea3614cf4a1d12c296f86812e . + "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . +_:N093bbb61d9594baa8b978ad303aad6af _:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 . +_:N624418f1db494f7ebe03fa364190d21d "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 _:Nbc8699aa0f544965affe9ba57e69fa78 . +_:Nc1f593d31b694f8d899bab4cfafbc332 _:N7265cf39508f4d7d8064b01c6fc7af91 . +_:N168ff94489204ce2b3d2bcc2e291d420 . + . + . +_:N1904cd4ccd84473a8555c9f0885877ef . + . +_:N35748216664842588d1d2428d0238f7c . + _:N56bea2883781491d89c9330a875e5e7d . + _:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:Nb0e55a7a3f404b718aa14c0523f748fc _:N8c4178586ccf4f6aac7bc77998ce8216 . + _:N01a7ef65b90c4cf2a2fd910705d3bb53 . + "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 "1"^^ . +_:Naf98619f104747d192028a17f0ecd8bb . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:Ne74d9ee0343b4b299f81fa823f3baa12 _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + "The `from` Element is modified by each `to` Element."@en . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + . + "hasDataFile" . + "other" . + "high" . +_:N24390832561247ea9edbcfeca24f67aa _:N702ebaf549e846d0bb51a54e7a52860e . +_:N0506962c2ba748529cc29fdcb1a61bce . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + . +_:N9af46730ac5e4549a37713d578ca2c0c "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . + . + . + . +_:Nd348352c7de54765832cc19f3d43300c . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + _:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + _:N7fc15c5a65f84366ada3c30ddb250517 . +_:N89b556da50e44c328fa4742ba07ad842 _:Ndc1cec228c454b62a5ab7eee0eab8995 . +_:N3aae1ae126af41909469c96ead6b6227 . +_:Nbfc53449413c4390876a7291e180ba07 _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + . +_:N7136c79627a74cbabf5f99227a8c06d3 "1"^^ . + . +_:N402019128a2449e3b5be3f04ec1f62f4 . +_:Nb076c63c99944bff81f8ce7e21fbf841 _:N0786949c6ae949ca971b0870a39e5628 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 "1"^^ . + . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . + "Records the results of general safety risk assessment of the AI system."@en . + "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nca3d4237e69846fa81bc53dc43b6029e "1"^^ . +_:N45733e14e2a1496b8dd8e675ad450ace _:Nbd3441f77ea64600b8f311e26c76a5cd . + "Identifies the tooling that was used during the creation of the Element."@en . + "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en . +_:Nefba3a71506d41cfabbc865580be12f7 . + "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + . + . +_:N7381b5af92324165b38a2ef399a3d683 . +_:N43b644328d464248beda66a9dc1b24f0 . + "A reference to a social media channel for a package."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + "noAssertion" . + . +_:N02216a682b174628b5883d37733d43f4 _:N2ef089c77eb34b33a0632d3a68232d5b . + . + . + "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . +_:N1192103857734e528f997dca990b3645 . + "categorical" . + . + "inlineMitigationsAlreadyExist" . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + . + "sha3_384" . + "Records any relevant background information or additional comments\nabout the origin of the package."@en . + "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + . + "A distinct article or unit within the digital domain."@en . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . +_:N82d87d74437f447f8c64422e7639002d . +_:N9dd1290b25404776b84fe5a85801893f _:N795110769b4a40288bd376f538317c4c . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:N7512c361fa6640a2a2d5027dcca31ae1 . +_:N11cc93477738430e89e745f56c83f147 . + "A container for a grouping of SPDX-3.0 content characterizing details\n(provenence, composition, licensing, etc.) about a product."@en . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Nc6682f937eb14a9faa960932d60969c2 _:N41bfdb0844834a9296a04a2b771b30d7 . +_:N81a6a212754843d3aba0e84f43791e7f . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + . + . + "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + . + "Provides a CVSS version 2.0 assessment for a vulnerability."@en . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + _:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nf679cce397cb41148e4dbc0de457788b . +_:Nf253c5f3fc0f40728e3b713da72f534f _:N82d87d74437f447f8c64422e7639002d . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:N0039cd20d11f4e1eb92b14040fe9d2ab . + "A License participating in a 'with addition' model."@en . +_:N2ef089c77eb34b33a0632d3a68232d5b _:N72025856b2c04aedb921459d28b8f3a5 . + . + . + "componentAnalysisReport" . + . +_:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:N6455bf8bc0534e40a8203b71244036bd . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 _:Nc6682f937eb14a9faa960932d60969c2 . + . + _:N6bf989b95c5e498e988052131700d5e6 . + "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . +_:N3aae1ae126af41909469c96ead6b6227 . +_:N2523b388c8904f2885050ee00d15f281 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . +_:N2b5a3ed5442042b6b9ecf776b63ca010 . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . + . + . + "Provides a place for the SPDX data creator to record the package URL string\n(in accordance with the Package URL specification) for a software Package."@en . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 "1"^^ . + "sha1" . +_:N3d0909f693c34cacbd26067f25a3cd4c . + . + "amendedBy" . + . +_:N69eefd6c115c4499be60a56a329082ed . + . +_:N3c78df17f57a45d7b66ef27d1d0b60be . +_:N4dc4509276114e519a1e36d2339cd154 "1"^^ . + "Specifies until when the artifact can be used before its usage needs to be\nreassessed."@en . +_:N4d64fe8feb16494b9674f49e196cdb1d . +_:N7f32ec55b71f438fa081e1ea71e23e12 _:N2b5a3ed5442042b6b9ecf776b63ca010 . + . + "source" . +_:N4ad7470591274ec4b6e670f8a9eb7616 . +_:Ndf398217fce6424ca2d23712e71263fb . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en . +_:N53d06bdaf9464b0fbd454088aee08786 . + "Provides the location of an exploit catalog."@en . +_:N575a40dcf9d2470382a3cb67027db887 . + "Identifies the download Uniform Resource Identifier for the package at the time\nthat the document was created."@en . + . + "Provides information about the primary purpose of an Element."@en . +_:N993312a33ff8406aaa62fb12f728a245 . + . +_:N06c2ea1f5832433aa8d0e7612d230380 . +_:N8535416071ef432187b8a91ab3a7e437 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 "1"^^ . + . + . +_:Nc505579387424472888c03cc153dd107 . +_:N0786949c6ae949ca971b0870a39e5628 . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + _:N617bdae809f549f9b84e4c71b02ccd33 . + . +_:Ncf95e811579f435d8190022c27ddc51e _:Nf29c3df33a36484ea8218e1467f21b77 . + . + . + . + . +_:N464f3e9fe6dc411b88a93fb1c9045967 . + . + . + . + . + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 . +_:Nb9bb8e59941d436cb193d8d8ecd38cce . + . + . +_:N9b073a51b7934d96882a3d7b2516e6ee . + "Records the biases that the dataset is known to encompass."@en . +_:N1dede72d56c347b085cf801844a9768c "1"^^ . +_:N69cc60cd211d4ac69d884813fa143fc7 _:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nef779dc58efd41708d2dd810a1c22861 . +_:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N3d49f1697b79484bb086d05ff0857eec . + "The product is not affected because the code underlying the vulnerability is not present in the product."@en . +_:Ne0351ee38a2940df9a643908f3c04c78 "1"^^ . + . + _:N33cee511d45243669ca60bd0a0f4a3a9 . + . +_:N54a4d666657c40289b7665b9f8fa4d2c . + . +_:Nfc42797a854d4008a99f6062c2875fc3 . + . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + . + . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 "1"^^ . +_:N026b410848804fea9d8c504126844111 . +_:N06c2ea1f5832433aa8d0e7612d230380 _:N92311b1b08cb437aaea5bc0c25bf4b50 . +_:N33e17640748a455091e7f615156e4be0 "1"^^ . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + . +_:Nacf93e2dadec4cf5a6eddab055d67599 . +_:N9af46730ac5e4549a37713d578ca2c0c "1"^^ . + "A short description of an Element."@en . +_:N81e9711becff48eaa08e25e5b6fea9c9 . + . + _:N96c77573f7d244af98fbb31a9a921415 . +_:N4106ddc0ab0a4a51b658689625cb4bcd . + . + "Specifies the VEX justification type."@en . + "Provides a reference number that can be used to understand how to parse and\ninterpret an Element."@en . + _:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:Na2ab1463e071402b941a055cf25405d0 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N93517a28b24343c8a9247206129a9684 . + "Provides a set of values to be used to describe the common types of SBOMs that\ntools may create."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 . + . + "A reference to additional license information related to an artifact."@en . + "A reference to a quality assessment for a package."@en . + . +_:N81a6a212754843d3aba0e84f43791e7f . + "graph" . + . + . + . + . + . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N218b2297f9704d99bf1b9e818945ce5c . + . +_:N7135267418f04789a477e78eef34865e . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + _:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + "Agent represents anything with the potential to act on a system."@en . + . + "serious" . + "A reference to funding information related to a package."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Na7d9beb4671848ceafe78da042cf29b8 . + . + "swhid" . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:N6ecbea142a87482db61924a78444a2e7 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 "1"^^ . + "Provides advise on how to mitigate or remediate a vulnerability when a VEX product\nis affected by it."@en . + . + "When a CVSS score is between 7.0 - 8.9"@en . +_:Nf5c2326720d14f579097f3ab47e8c762 . +_:N8d9932eb554044d69adb3585d42ac4a4 _:N6455bf8bc0534e40a8203b71244036bd . +_:N1183c95846404f8686047bb384b1fbb5 . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . + "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 "1"^^ . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . +_:Nd696d0bece9045cfa929993fc189dab6 "1"^^ . + "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . +_:Na69fc7a1c2654979ada4d85b1717874b . + "library" . + . + . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . + . +_:Nb8bc8bf36ce34c4088051dc1208e1af9 . + _:N2bf58c59d4e345bd92c2c66da13d5577 . + "reportedBy" . + . + . +_:Nfea77563e3c34609b220695df9edc63c _:Neac9dbcbb01c41b9aa58fa84eeec98d3 . + . + . + "analyzed" . + . + "build" . + . +_:Ne0e964c633594ba097b6a750a6ade092 . + . + "packagedBy" . + . + . + . + "delegatedTo" . +_:N56df7be59075471b9d1466398865afdd . + "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + . +_:Nb9bb8e59941d436cb193d8d8ecd38cce _:N464f3e9fe6dc411b88a93fb1c9045967 . +_:Nf016298471ac4dc394002a7ecea87e4a . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + . + "An Individual Value for Element representing a set of Elements with\ncardinality (number/count) of zero."@en . + "The `from` Element contains each `to` Element."@en . + _:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na4c9815bb1c74163aad85a1b13e04f13 "^[^\\/]+\\/[^\\/]+$" . +_:N1411c3ed7f0d479e9873248eb22f62f2 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Nfb33f9dd13074a5393c69c370e2cb4f3 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + _:N1183c95846404f8686047bb384b1fbb5 . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 "1"^^ . + _:N164dbad8168a495a98820f4a532bad8c . + "hasDistributionArtifact" . + "packageUrl" . + "clear" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + _:N33e17640748a455091e7f615156e4be0 . + "buildMeta" . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 . + "design" . + _:N026b410848804fea9d8c504126844111 . + . +_:N341f19d094bb4183a2db06364073f914 . +_:N353f7075a1fe48b3b7b7af086e4aa2ed _:N92fcf21ac8a64f358f68624b0432e712 . +_:N6484abf63505400facffdf4a86936716 _:N832cd397b3524a16ae0417e09ab5b40e . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + "A License participating in an 'or later' model."@en . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N473befceadbe42d0bd9069dd0ce4699b . +_:N559cf862cf484b388a29cbb3e04d2539 . +_:Nbc9ecbd1db234efabb062c64c5b1582e . + . + . +_:N1bc2f7dd56904c86b46e121aeb8cb636 . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + . + . +_:N4daef40acaac487baa5fb20c0fd627ac . +_:N8dfde768ccad4b2b91f251f73ad6cf1b . + "track" . + . + . + . + "altWebPage" . +_:N19caf49b458948aab96db18d18a37807 . + "timestamp" . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . + . + _:N2a5d53abe06a466584993d22f4218cac . +_:N026b410848804fea9d8c504126844111 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . + . + . + . + . + . + _:N30178f0a784c43079551a63b841da0ba . + . + . + . + . + . + . + _:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:Na5a947182f8f431690f104df52b37ae4 _:N43b644328d464248beda66a9dc1b24f0 . + _:N95c3ead21e6e4ecd95af23263451b25e . + . + "A reference to a risk assessment for a package."@en . + _:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "The Element is a software manifest."@en . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 . + "exploitCreatedBy" . + "A group of people who work together in an organized way for a shared purpose."@en . + . +_:N7265cf39508f4d7d8064b01c6fc7af91 _:N9ef78d5edabf4efbb280aa669f60517d . +_:Ndb89662869e64a20938720be32e56b7b _:N06c2ea1f5832433aa8d0e7612d230380 . +_:Nc07374747c9448faae0e1e2622db1d7d . + "The `from` Element is amended by each `to` Element."@en . +_:N92311b1b08cb437aaea5bc0c25bf4b50 _:N02429c72607846619a4d3bc4f9e9e971 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:Nd6fa5fcf79af41aca71f798a61820519 _:Neea78b34b53645d9b977d4dafb032fbb . + . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 . +_:N10776ad90ad94042bfd598e68f215ed9 "1"^^ . +_:Nb5d70b9706cb46a29801cbcb49dffef6 _:N497a6b43b7584ce9a497817fce159210 . +_:N135abe5aa7184697abfa5b1134f74635 . + . + . +_:N2f0b2a4ea3614cf4a1d12c296f86812e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N4570847561a247b190684fe248fa523f . + "Defines the beginning of a range."@en . +_:N69eefd6c115c4499be60a56a329082ed . + "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + . +_:N476942db27384f75af2da9e29db94014 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 _:Nc68de2290dec4037b97bb40ca8c0adb1 . +_:Nca3d4237e69846fa81bc53dc43b6029e . +_:N750e6ba1e1744f44956807fd65a5a4f7 _:Ne09d8237f43b483293ea5b23d9d378c9 . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Nf679cce397cb41148e4dbc0de457788b . +_:N5f901838dbd947f0aef2c3a4486db889 . + . +_:Nbd3441f77ea64600b8f311e26c76a5cd _:N8e9938cc2a3c4da9abce340cca712edd . + "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + . + . +_:N6d2410ca374f432183cea69b81c161ec . + . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 . + . + "A reference to a purchase order for a package."@en . + "simpleLicensing" . +_:Nb94c57793202400e991c908c29f04c8d . + "A reference to an alternative web page."@en . + . +_:N92b9f222f5b94268a55c169346f957f1 . + . +_:N9b30e49ee021458b83b41fb0202c4043 "1"^^ . +_:N0dd20b85a99e41b2b7b8481f3a0553a4 . +_:Nabf8267e85fe497f80f96eaecb2a8ecc _:N7381b5af92324165b38a2ef399a3d683 . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:N45733e14e2a1496b8dd8e675ad450ace . + "Any other units of energy measurement."@en . +_:N9539a3aa8f2640ccbf5e3147b95d0acd "1"^^ . + _:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:Nd498732042494722ac01f812b9752e13 . +_:N28454dc7d61d47bd9f19e037f20819ed . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4dc4509276114e519a1e36d2339cd154 _:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N24fab7059f894755bb21ef4ddc4d0f4f "1"^^ . + "hasMetadata" . + . + . +_:N2b4511fa0df849dca000a39ac34c254a . + "usesTool" . + . + _:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . + "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en . + . + . + . +_:N7d38e5ecd3ab4556b895637c8beeb598 _:N5facf933623c4898a775e670cb057eef . +_:N93517a28b24343c8a9247206129a9684 _:N5c52044e0e91489480dcbc1b1bb7e350 . + . +_:Nc0cbe94b1b9f4c518494e91bc175e759 _:N47bf567d302048459f09bc6f9e280b5e . + "Specifies an Extension characterization of some aspect of an Element."@en . +_:Ne0e964c633594ba097b6a750a6ade092 _:N89b556da50e44c328fa4742ba07ad842 . + _:Ne3e78235566445608978be9329e74cc2 . + "Timestamp of impact statement."@en . + . + . +_:Nd72c256eb46a430db7454aad221ffc59 . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "amber" . +_:N6841333db1c2440083b2a1e012968a62 . + "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . +_:Nce1c9f7707b749df9c04405465f5d693 "1"^^ . +_:N4e66507395a34b13854c4b51db14e6c1 . + _:Nb757eb766bcf484dab7fcc8640520f26 . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + . + "Specifies the algorithm used for calculating the hash value."@en . + . + "test" . + "eolNotice" . +_:Nf016298471ac4dc394002a7ecea87e4a . + . + . + . + "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + . + . + "Specifies the SSVC decision type."@en . +_:N2f9a893241114b04a570a074eb5e90fd _:Nf07f4220a2fd47bea00636caef099680 . +_:N53d06bdaf9464b0fbd454088aee08786 "1"^^ . + "The Element is the evidence that a specification or requirement has been fulfilled."@en . +_:N62cbeb231bc544a7ac8aab5e8217d804 . + "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . +_:N4c52d9d036934841b17eac13b27a39f8 . +_:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Nd507d892ccf546c68470c2ad1de481bc . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nf9e398de7c23460c95e7fec63c92065d _:N5546070c54224ce482c3cbd8b3c5d898 . + "Other exploit catalogs"@en . + "hasVariant" . + . + "productMetadata" . +_:N5c52044e0e91489480dcbc1b1bb7e350 _:N9919f57d67bd4992ac37a637007f56b9 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N24687f30f3e64312b787f409644f4343 "1"^^ . + "References an Element on the right-hand side of a relationship."@en . +_:Na2ab1463e071402b941a055cf25405d0 "1"^^ . + "Dataset can be shared within a community of peers and partners."@en . + . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + . + . +_:N2a5d53abe06a466584993d22f4218cac _:Nac7de1144825418b96a3c43ff6d678a6 . + _:N97f27abc23b9427f8445614385fdd5e7 . +_:N96c77573f7d244af98fbb31a9a921415 "1"^^ . + . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . + "generates" . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . +_:Ne74d9ee0343b4b299f81fa823f3baa12 . + "Dataset may be distributed freely, without restriction."@en . + "hasTestCase" . + "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + "Provides an indication of where to retrieve an external Element."@en . +_:N0725b77584894b4c82b93fc68df0a45d _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . +_:N3aae1ae126af41909469c96ead6b6227 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "limitedSupport" . + "System Package Data Exchange (SPDX) Ontology"@en . + "The version of the SPDX License List used in the license expression."@en . +_:N4e66507395a34b13854c4b51db14e6c1 _:N3e5fc4328f364305a1c66fdd7534c881 . + "expandsTo" . +_:Ne09d8237f43b483293ea5b23d9d378c9 _:N9dd1290b25404776b84fe5a85801893f . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Specifies the time from which an element is applicable / valid."@en . + "A substitute for a URI."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + . +_:N5234c2f9e59a42d9867dd1846c82c769 _:Nb29082bbf3a54faf833061815ecea3cd . + . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db . +_:N3484c741d91a4723b5c7f52d12122e53 . +_:N11d2469065ae40ba876541501b6ad701 . + "securityAdvisory" . +_:N47bf567d302048459f09bc6f9e280b5e . + "An element of hardware and/or software utilized to carry out a particular function."@en . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 . +_:N6d5b2261790642829d74aecc96d7e681 "1"^^ . + . +_:N3ae792b6cfbc44649f0ea01eb18a0fb3 _:N62cbeb231bc544a7ac8aab5e8217d804 . + "Provides a map of a property names to a values."@en . + . + . + . + "sensor" . + "hasTest" . +_:Ncc8fbdb6574b455aa71ca75a347cd39f _:N2f9a893241114b04a570a074eb5e90fd . + "blake2b384" . +_:Na0207e8ebb3546d494a226941f26b82a . +_:Na2ab1463e071402b941a055cf25405d0 . +_:N33e17640748a455091e7f615156e4be0 . + "Specifies the type of a content identifier."@en . +_:N8e015961b7e9410e98c4287ad1a58ebb _:Nfc42797a854d4008a99f6062c2875fc3 . + . + "the element follows the Dataset profile specification"@en . + . +_:N1f1d4556eef644b9976392b54821e832 _:N4feeea92771943cf9cdc1cb0e5a19eb8 . +_:N702ebaf549e846d0bb51a54e7a52860e . + . + "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + "releaseNotes" . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . + "yes" . +_:N7c1afce8b8f14d94b7b00b67814f4a92 _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + "Provides a place for the SPDX data creator to record acknowledgement text for\na software Package, File or Snippet."@en . + "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + . + . +_:N2aad1aae2d3f47e8b136b6be47eab335 _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . +_:Na1a58d858f5445009e4e9c1c79b01ee8 "1"^^ . +_:Na0207e8ebb3546d494a226941f26b82a . +_:N8535416071ef432187b8a91ab3a7e437 "1"^^ . + "data consists only of numeric entries."@en . + . + "cve" . + _:Ncc31c01eeda0480ea00ea96b0f811739 . + "Property describing the session in which a build is invoked."@en . + "Identifies the full text of a LicenseAddition."@en . + "hasDynamicLink" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N19bf11d3eb754e10bd676b9b7780555e . + . +_:N35f6a1c62bd343da8432836cbbbd8d0e _:Nf016298471ac4dc394002a7ecea87e4a . +_:N316e8b195aee413da3f8a16b55477afe . + . + . + "registration" . + _:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . +_:N4a71e77d78634c69959e3e011db657c9 . +_:N22a009d8e6fd49afa8d991cf125d3386 . + "design" . +_:Nfe7bb70385ba4334afb3dd58e4476443 _:N3484c741d91a4723b5c7f52d12122e53 . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . + "Identifies the full text of a License, in SPDX templating format."@en . +_:N9b073a51b7934d96882a3d7b2516e6ee "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:N45d29e6a8f964d629bcfd38e8a2812df . +_:N1dede72d56c347b085cf801844a9768c . +_:Ne3e78235566445608978be9329e74cc2 . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + . + . +_:N749163c9109e4fdaadb44dbb77f4bed4 "1"^^ . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . + "publishedBy" . + "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + . + "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . +_:Nf9c56978821e4d65b3c9e6089e72244f "1"^^ . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Ncd772398fef24acfb9c377355aaa70e4 "1"^^ . + _:N3d0909f693c34cacbd26067f25a3cd4c . +_:N6d2410ca374f432183cea69b81c161ec . + . + . + . + "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + . + "The Element is used to install software on disk."@en . + . + . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . + . + "A value used in a generic key-value pair."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "An SPDX version 2.X compatible verification method for software packages."@en . + "describes" . + . + . + . +_:N918ee014e9d04d56bb2c1642fd51a78f _:N0207d8bc435b4fcf933b378f5d74d81c . +_:N30178f0a784c43079551a63b841da0ba . +_:Nfe7bb70385ba4334afb3dd58e4476443 . + . + . + "deviceDriver" . + _:Nef779dc58efd41708d2dd810a1c22861 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 "1"^^ . +_:Nd685430b1a9c44d6abb820e3d22ad9fc _:N1e65c28f50ca472e8d766dd913f3ecc1 . + "build" . + "the element follows the Lite profile specification"@en . +_:Ne0351ee38a2940df9a643908f3c04c78 . +_:Ned0fe992065d49dd890483be50cffa45 . + . + . + "operatingSystem" . +_:N89b556da50e44c328fa4742ba07ad842 . +_:N464f3e9fe6dc411b88a93fb1c9045967 _:N21bd6927f63f42d79efcc4dad7881e53 . +_:N39208ce6d6704289bce5a33c713589ba . +_:Nd9b0e8688faa4db8bc021fe50af253fe _:Nc37338dfb4174f0492ed890f475cafc1 . +_:Nc37338dfb4174f0492ed890f475cafc1 _:N51a6abe36bbb4a9a8cce23555b0fa72a . +_:N164dbad8168a495a98820f4a532bad8c . +_:Nd6035645b90646908c1881b4d968ce2e . +_:Ne3c684285049449e9ee58f318c943f4f . + . + . +_:N90f6c4f3b60f4279b4188594f640b568 . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N0e6424a884214886a5182405c83ce0e5 . +_:N2f9a893241114b04a570a074eb5e90fd . +_:N0207d8bc435b4fcf933b378f5d74d81c . + _:N168ff94489204ce2b3d2bcc2e291d420 . + "sha3_224" . +_:N41bfdb0844834a9296a04a2b771b30d7 . + . + . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . +_:N22a009d8e6fd49afa8d991cf125d3386 "1"^^ . +_:N99de8e9db44844b5a9d11b197386f3d0 . + . + . + . + . + "executable" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . + _:N11cc93477738430e89e745f56c83f147 . +_:Neba2498dd09a4417a0ad37b9ab3e5e69 _:N64aa778e8d414bb58cc29d8a040aa5b5 . + . + _:Nf679cce397cb41148e4dbc0de457788b . + "other" . + "A reference to a privacy assessment for a package."@en . +_:N1e65c28f50ca472e8d766dd913f3ecc1 . +_:N40360ba6386b4532be67e616fc8cd204 . + . + "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + . + . + . + . + _:N624418f1db494f7ebe03fa364190d21d . + . + . + "noAssertion" . + "green" . + "The Element is an operating system."@en . + "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . +_:N042b9bb4151c4219ae35ea4665b1cb85 _:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . +_:N765d53a52f60469db1405497bbdeb524 . + _:N645cfb9d3c334cc1a3175307175364c7 . +_:Nba7479035af442ada086c0338c451097 "1"^^ . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 . +_:N6faa0ec40c2944cc96365e0200f91bc7 . + "System Package Data Exchange (SPDX) Ontology"@en . +_:N4dc4509276114e519a1e36d2339cd154 . + "configures" . + "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + "An assertion made in relation to one or more elements."@en . +_:N49ef6f7a94564ae0956279bb86096fa0 . +_:Ndd62961c42b449c7999ac09e91c55bb2 . + "A string in the license expression format."@en . + . + . + . +_:N4c0f1c4516d84ccca992781aa73748b0 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 _:N765d53a52f60469db1405497bbdeb524 . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:Nbd73767485264c33bc64cc9b42c99b88 . +_:N9a16803acd9b4de0a606f5c7ca338d46 _:Nb41bc224042f48e3b42c657cad654e89 . + "mailingList" . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . +_:N02637b6a678241cda6ec95b576156ac2 "1"^^ . + . + . + "falcon" . + "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + . +_:Nc36cca07a48048b18bee65bd265e3473 _:N45d29e6a8f964d629bcfd38e8a2812df . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . +_:N4b9123c429a143928240efffd877c09e _:N5dc3284b65a24ff69bef8bb7c2950f40 . + . +_:N51cddf68303a476d955b87917202ff31 . + "kilowattHour" . +_:Ndc1cec228c454b62a5ab7eee0eab8995 . + . + . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . + . +_:Na2ab1463e071402b941a055cf25405d0 . + . +_:Ne36b98993a6a41abaca571a82d61050c . +_:Ndf398217fce6424ca2d23712e71263fb _:N09d41b24e37944889b085f3a5dec27a2 . + . + "archive" . +_:N2ceaa2ca925c4e80b9d615666e91bb76 "1"^^ . + . + . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . +_:N4daef40acaac487baa5fb20c0fd627ac "1"^^ . + "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + _:N6faa0ec40c2944cc96365e0200f91bc7 . +_:Na93b9a0680a145d7ad7614c15215165f . + . + "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + "filesystemImage" . +_:Ne25f494d3fbc45bfae592617345de5db _:N7135267418f04789a477e78eef34865e . +_:Ne16b834cedfa4b8db4d362a45561064d . +_:N97f27abc23b9427f8445614385fdd5e7 . + . +_:N4252a866980f4a839fad017a197dc8af . +_:N48a995c812d240c8991c7af527062228 "1"^^ . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:N026b410848804fea9d8c504126844111 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + . + "Identifies from where or whom the Element originally came."@en . + "deployed" . + . + "Categories of presence or absence."@en . + . +_:N8737dc2b1bd6408b852d2324c6ce404e . + _:N02637b6a678241cda6ec95b576156ac2 . + . + . + _:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N5fdc75b020564411a5c638c9aa7169b1 "1"^^ . + . + . +_:Nb831ba68859845819894bc24124f2493 . + "firmware" . +_:N5c7bcd96bfe24354b9199d05991a1c3c _:Nbd73767485264c33bc64cc9b42c99b88 . + _:N83380edfda0143559b20b6f86b17c17a . + . +_:Na075cb0c74ec4575aa5a2c4301d28902 . + "Specifies whether a license or additional text identifier has been marked as\ndeprecated."@en . +_:N54383bc8be2a41518a2fb5a7b1171841 _:N559cf862cf484b388a29cbb3e04d2539 . + "documentation" . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 . + "patch" . + . + . + . + . + "Property that describes the digest of the build configuration file used to\ninvoke a build."@en . + . + "A reference to metrics related to package such as OpenSSF scorecards."@en . + . + . +_:Nc07374747c9448faae0e1e2622db1d7d . + "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nae4f8b47fa644be6b9a1efc5c4e5a57e _:N31d552db951b47269f52c41b41761d5d . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . + . + "numeric" . +_:N9dd1290b25404776b84fe5a85801893f . +_:N01b35060833a487b8f68dd5852fb7128 . +_:N19caf49b458948aab96db18d18a37807 . +_:N164dbad8168a495a98820f4a532bad8c . +_:N5484226f71e247459aecae3701f31924 _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + . + _:N22a009d8e6fd49afa8d991cf125d3386 . + "medium" . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + "Specifies the type of the external identifier."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:N135abe5aa7184697abfa5b1134f74635 _:N54383bc8be2a41518a2fb5a7b1171841 . + _:N5d88af867062488cb6e9d9d48ff41920 . +_:N897103c5db374d44a639af1692f596b0 . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d "1"^^ . +_:N308fb6485f7d4864923946d7ba83b984 . +_:N2c2208ee7e3d40ca97119f695308f1f3 . +_:N308fb6485f7d4864923946d7ba83b984 . + _:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N88fb6b952c0b4497afed840a2b36b7c3 . + "A license or addition that is not listed on the SPDX License List."@en . + . + . + "critical" . + "ai" . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . + . + . + "Enumeration of dataset types."@en . + . + "Specifies the unit of energy consumption."@en . + _:N67676f11ca184c05a0d5f6249a4b14fa . + "sha384" . + "runtime" . + "hasInput" . + "urlScheme" . +_:N012999398659462aa7d4d45cfea4cd49 _:Ne0e964c633594ba097b6a750a6ade092 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . + "review" . + "Provides a reference to a resource outside the scope of SPDX-3.0 content\nthat uniquely identifies an Element."@en . + . + . +_:Ne1807e7da3dc42d8921080afa2df652f _:N353f7075a1fe48b3b7b7af086e4aa2ed . +_:Ne75a3e4d4bce46dfbf2794c7bec43888 _:N8e015961b7e9410e98c4287ad1a58ebb . +_:N8aeda8c772e348afb93afc3dc5457355 . + . + "deployed" . + . + "A license exception that is listed on the SPDX Exceptions list."@en . +_:Nb41bc224042f48e3b42c657cad654e89 _:Nd81e7e097668428d8d37dd7470a77974 . +_:Nbed0dcc3c778406db4d3f6eca8c4c177 _:Nc27cd84531894867a3501b47035a2c04 . +_:N97f27abc23b9427f8445614385fdd5e7 "1"^^ . + . + "The Element represents a runtime environment."@en . +_:N7136c79627a74cbabf5f99227a8c06d3 . +_:N3da1b725121949138220323e55721af3 . +_:N53d06bdaf9464b0fbd454088aee08786 . + . +_:N1183c95846404f8686047bb384b1fbb5 "1"^^ . + . + "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + . + "bom" . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + "The second-highest level of risk posed by an AI system."@en . + "structured" . + "Provides information about the creation of the Element."@en . +_:Ndb15970ce7d34e878a0a7123dad52212 . + _:Ndd62961c42b449c7999ac09e91c55bb2 . + "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + "staticAnalysisReport" . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N9600326f07e84fd0b5702dbba8fb5692 _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + . +_:Nc4c2447375154c088326785e5201d90c _:N4570847561a247b190684fe248fa523f . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:N04c0f4b0b7d94bb980f1ae6d828c54eb . + . + . +_:N83380edfda0143559b20b6f86b17c17a "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "funding" . +_:N331685f17119458e9f8d03e1032a587d "1"^^ . +_:Nc27cd84531894867a3501b47035a2c04 . + . + "blake2b256" . + . + _:N1e10b72106c748bf8326627b02c07313 . + "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + "A map of Element identifiers that are used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "A reference to additional product metadata such as reference within organization's product catalog."@en . +_:N4b172a1a115b4973a390eec846d3cadb . +_:Ne09d8237f43b483293ea5b23d9d378c9 . +_:N2ad096761e3044fcb326834ae006af13 _:Ne71793c1d96b4398876c3fddfc0f543d . + . + . +_:Nf1f23fee13584cbeb79e3baa0c6b05b2 . +_:Ne30781691aca482680ffd9bbd2045c91 . + . +_:N0e2779bcf1bd430f8f30fa6286429aa8 . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Nefb954041ff74e1c981f465bcaab5d3b . +_:Ncaa9a447e341490894b8ea06dc485a0c . + "Describes if a given file is a directory or non-directory kind of file."@en . + "sha3_256" . + _:N7136c79627a74cbabf5f99227a8c06d3 . + . + "securityFix" . +_:N35f6a1c62bd343da8432836cbbbd8d0e . + . +_:N8e9938cc2a3c4da9abce340cca712edd . +_:N7ce5215fd77b4391bb0faf9a289c9651 _:Nf34b3b1798cd4b95ad7460d818440421 . +_:N09d41b24e37944889b085f3a5dec27a2 . + "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + "vulnerabilityExploitabilityAssessment" . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "The third-highest level of risk posed by an AI system."@en . + _:N331685f17119458e9f8d03e1032a587d . +_:Nf29c3df33a36484ea8218e1467f21b77 _:N93517a28b24343c8a9247206129a9684 . + . + "vulnerableCodeNotPresent" . + . + . + "Describes potentially noisy elements of the dataset."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:N9600326f07e84fd0b5702dbba8fb5692 . + . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + . +_:N012999398659462aa7d4d45cfea4cd49 . + . + _:Nefba3a71506d41cfabbc865580be12f7 . + . + . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . +_:Nb09aae7f35a946528a44d9a113f868cb . + . + "Kilowatt-hour."@en . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the completeness of relationships."@en . +_:Ne452fc8d239747848f49c2ac0d8e39d8 _:Ne25f494d3fbc45bfae592617345de5db . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . +_:Nf29c3df33a36484ea8218e1467f21b77 . + . + "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + _:N5a72932413d2413b80569a5fb2966e41 . + . + . + . +_:N56bea2883781491d89c9330a875e5e7d . + "Specifies the amount of energy consumed when finetuning the AI model that is\nbeing used in the AI system."@en . + _:N84fbf505fc5b4942809840c744afbc50 . +_:N88d076d5560e44378fc63f2196d3e9be . +_:N9ef78d5edabf4efbb280aa669f60517d _:Na084b549fa4a46ef9c69e235fea6cfdf . + "Links a vulnerability and one or more elements designating the latter as products\nnot affected by the vulnerability."@en . + "file" . +_:Ne63e0f50816b4addb79d58c16a81bee3 . + . + "hasProvidedDependency" . + _:N642c1242529241e184296a5a0b57d7d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a "1"^^ . + . + "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . +_:N3e856278a9cf4af2badbcdbf73f80ffa _:N473befceadbe42d0bd9069dd0ce4699b . +_:Nfc1ba2b198a0488b97e460730d5d8314 . + . + . +_:Na4c9815bb1c74163aad85a1b13e04f13 "1"^^ . +_:N5aebbc4f9aa74a9ca8a930203a1284f2 _:Nf0f8e43d5c7b417bb04959276983ea1c . + . + "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en . + . +_:N3e5fc4328f364305a1c66fdd7534c881 _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N7f32ec55b71f438fa081e1ea71e23e12 . + "Identifies the text of one or more copyright notices for a software Package,\nFile or Snippet, if any."@en . + . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:N7136c79627a74cbabf5f99227a8c06d3 . + . + "no" . +_:N168ff94489204ce2b3d2bcc2e291d420 . + "The field describes the availability of a dataset."@en . + . +_:N53d06bdaf9464b0fbd454088aee08786 . + "ancestorOf" . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 "1"^^ . + "swhid" . + "dependsOn" . + "serializedInArtifact" . + . + . +_:Nca3d4237e69846fa81bc53dc43b6029e "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + "text" . + . + "Abstract ancestor class for all VEX relationships"@en . +_:N7f4ceb4220154dcc8f61793dbc8c6852 . +_:N11cc93477738430e89e745f56c83f147 . + "Property describing a parameter used in an instance of a build."@en . + . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:N4dc4509276114e519a1e36d2339cd154 . +_:Na5a947182f8f431690f104df52b37ae4 . +_:N303a78ff780a48fdbcb374ff43820d99 "1"^^ . + . + . + "The Element is a machine learning or artificial intelligence model."@en . + "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + "the element follows the Security profile specification"@en . + "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + . + . +_:Na71e0164a5d7491f82b21b32a559f2a4 . + _:N1904cd4ccd84473a8555c9f0885877ef . +_:N388a67e4decf423d92132d6f8ca8791d . +_:N476942db27384f75af2da9e29db94014 . + . +_:Nf5c2326720d14f579097f3ab47e8c762 _:Na34b9857d3494dd3bc57ea0aac372489 . + . + "Refers to any object that stores content on a computer."@en . + . + . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . + . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . +_:Ncaa9a447e341490894b8ea06dc485a0c . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N3150b51898a54a30b8c523d53721610a _:Nbc8ad111179e4d28aeca12d049d01869 . + _:Nd507d892ccf546c68470c2ad1de481bc . + . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 "1"^^ . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 "1"^^ . + . + "other" . +_:N804dd6908e264d10be7ab47179d84223 . +_:N832cd397b3524a16ae0417e09ab5b40e _:N1f2ca5a087da4ddc9e0f1c3623d854cb . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . + . + . + "Specifies the time an artifact was built."@en . + "manifest" . + "securityOther" . + "An Individual Value for Element representing a set of Elements of unknown\nidentify or cardinality (number)."@en . + "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . +_:N6faa0ec40c2944cc96365e0200f91bc7 "1"^^ . +_:N0e6424a884214886a5182405c83ce0e5 _:Nc8cdfd8c3ff74b469faab892beaa7bd5 . + "A canonical, unique, immutable identifier"@en . + . + . + . + "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + . + "fixedIn" . + . + . + "When a CVSS score is between 9.0 - 10.0"@en . +_:N15f27dd5aa464b16b06fd5927807179d "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N83380edfda0143559b20b6f86b17c17a "1"^^ . + . +_:N39208ce6d6704289bce5a33c713589ba . + . +_:N6841333db1c2440083b2a1e012968a62 . + _:N9af46730ac5e4549a37713d578ca2c0c . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N2aad1aae2d3f47e8b136b6be47eab335 . + . +_:Nd25a98977037415f94236e4881c554c0 _:N81e9711becff48eaa08e25e5b6fea9c9 . + "development" . + . +_:N00a4f89addf045d28864aa6380106e8c "1"^^ . + . +_:N4252a866980f4a839fad017a197dc8af _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . +_:N402019128a2449e3b5be3f04ec1f62f4 _:N6e67e553547e4413a6ba103a34e16d88 . +_:N872f874bf6a643fb922cfeb84da33004 . + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N25996c4894e1460a8b698f0cbef34195 . +_:N92aedbc611024e52983c2e9da6fdb503 . +_:Nf9c56978821e4d65b3c9e6089e72244f . +_:N6bb457a45b8149f09614fbba0dde597c _:N5dc7ad7b328945158bb2c61ac16e194c . +_:N22a009d8e6fd49afa8d991cf125d3386 . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N02637b6a678241cda6ec95b576156ac2 . + . + . + "Identifies an external Element used within an SpdxDocument but defined\nexternal to that SpdxDocument."@en . + "blake2b512" . + "Describes the type of the given dataset."@en . +_:N6e67e553547e4413a6ba103a34e16d88 . + . + "Specifies the unit in which energy is measured."@en . + . + "Low/no risk is posed by an AI system."@en . +_:N907869d713e3425588796c37fb9c49c1 _:Nb3d9d9553ea04f749108d2000dfc3953 . + _:Ncd772398fef24acfb9c377355aaa70e4 . + . +_:N2bf58c59d4e345bd92c2c66da13d5577 . + . + . + . + "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 "1"^^ . + "cpe22" . + . + "The class that helps note down the quantity of energy consumption and the unit\nused for measurement."@en . +_:N645cfb9d3c334cc1a3175307175364c7 . + . + . + _:N6999f1ba66054cb9a6683482a6046870 . +_:N1183c95846404f8686047bb384b1fbb5 . + _:Nf9c56978821e4d65b3c9e6089e72244f . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:N64aa778e8d414bb58cc29d8a040aa5b5 _:N49ef6f7a94564ae0956279bb86096fa0 . + . + _:N722b841e0cc144789cdd7e01a5a50ea9 . + "blake3" . + "certificationReport" . + _:N6841333db1c2440083b2a1e012968a62 . + "securityPenTestReport" . +_:N09f51f6b10be4948ac38d31ce896aced . + "runtime" . + "data is a collection of images such as pictures of animals."@en . + . + . +_:N5dc3284b65a24ff69bef8bb7c2950f40 . +_:Na69fc7a1c2654979ada4d85b1717874b . +_:Ndc9ca13ca7e045a890f1b0f580371051 "1"^^ . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . + "Provides information about the content type of an Element or a Property."@en . +_:Nbdef0d6b9a2a427fb4b1814e3c775c93 _:N2dc39d16ee9f4be191ad3506bae0c216 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + _:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:Nf253c5f3fc0f40728e3b713da72f534f . +_:Nbd4cabc421bb46b3977fcf236c7870ff "1"^^ . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 . +_:N3989f3d5c22c4cd2b18614b38e4fd864 . + _:N8535416071ef432187b8a91ab3a7e437 . + "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + "Provides an ExternalMap of Element identifiers."@en . + . + "Categories of confidentiality level."@en . + . +_:N3ecca35aacff49e881d71ec1ce7aeb60 . +_:N49ef6f7a94564ae0956279bb86096fa0 _:Neb7d9e3129e841ffba55cfcffa695a61 . +_:Nb757eb766bcf484dab7fcc8640520f26 "1"^^ . + . + . +_:N0d74c19737464f18adb7fb9e70490836 _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + "other" . +_:N33e17640748a455091e7f615156e4be0 "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + . + . + "the element follows the expanded Licensing profile specification"@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:N31d552db951b47269f52c41b41761d5d _:N99c1538993cb4cc0a17aa9ebc04745e5 . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:N3d0253c9ab6d43bd870cafd49a1aa17e . + . + . + . + "releaseHistory" . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 . + . + . + _:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:Nf9e398de7c23460c95e7fec63c92065d . +_:Nc68de2290dec4037b97bb40ca8c0adb1 . + . +_:N844378f645c04baba1e77ba4c91a005c _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . +_:Nba7479035af442ada086c0338c451097 . +_:N056b619290c944b1b9efec2e986869b0 "^[^\\/]+\\/[^\\/]+$" . + "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "kev" . + _:Na4c9815bb1c74163aad85a1b13e04f13 . +_:Nd9b0e8688faa4db8bc021fe50af253fe "1"^^ . +_:Nd8b38be0c57d489a82194c062bbe0b40 "1"^^ . + "The Element represents software that controls hardware devices."@en . + "npm" . + . +_:N907869d713e3425588796c37fb9c49c1 . +_:N8919fac9e03440b19957656e4c6d5f47 . +_:N2ef089c77eb34b33a0632d3a68232d5b . +_:Nbd3441f77ea64600b8f311e26c76a5cd . + "Describes a mechanism to update the dataset."@en . + . +_:Nbd4cabc421bb46b3977fcf236c7870ff . + "Records if sensitive personal information is used during model training or\ncould be used during the inference."@en . + "Describes methods that can be used to explain the results from the AI model."@en . + "Provide consumers with comments by the creator of the Element about the\nElement."@en . + . +_:N617bdae809f549f9b84e4c71b02ccd33 . + . + . + . +_:Nf1da170952db48feafb61cf8eea0c317 _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + . + "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en . + "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . +_:Nc6682f937eb14a9faa960932d60969c2 . +_:N61923a50c86b4ba0b8957d6b10968ce2 "1"^^ . + "Specifies whether an additional text identifier has been marked as deprecated."@en . + . + . + "The Element doesn't fit into any of the other categories."@en . +_:N1dafd5bc3b6040e490dfb6830c66802d _:Nc4c2447375154c088326785e5201d90c . +_:N96c77573f7d244af98fbb31a9a921415 _:N0725b77584894b4c82b93fc68df0a45d . +_:N3ae1b4b606c54455af1a19bb1a2bfbb1 _:N8d94ac10bc5f422ca55e9aa451328fd1 . + . + . + _:Nd696d0bece9045cfa929993fc189dab6 . + . +_:N83380edfda0143559b20b6f86b17c17a . + "An Element an annotator has made an assertion about."@en . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + "requirement" . +_:N7c577594e1734b4ebabc9b18761d5162 _:N99de8e9db44844b5a9d11b197386f3d0 . + . + . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + _:Nacf93e2dadec4cf5a6eddab055d67599 . + "Availability of dataset."@en . + "hasDeclaredLicense" . +_:N10776ad90ad94042bfd598e68f215ed9 . + . + . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . +_:N0530f2e80adb4606aeaa0ee0c0b381af . + "data is of a type not included in this list."@en . +_:N48a995c812d240c8991c7af527062228 . + . + "Indicates absence of the field."@en . +_:N5234c2f9e59a42d9867dd1846c82c769 "1"^^ . + . + "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + . + . + _:N9b073a51b7934d96882a3d7b2516e6ee . +_:N993312a33ff8406aaa62fb12f728a245 _:Nd74f1a1f51db45fc8a121a72f2810ce9 . +_:Nd348352c7de54765832cc19f3d43300c _:N8737dc2b1bd6408b852d2324c6ce404e . + . + . + . + "hasRequirement" . + . +_:Nc37338dfb4174f0492ed890f475cafc1 . +_:N9b30e49ee021458b83b41fb0202c4043 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + . +_:Ndba01dc226ee49c3be1b757c1787cb43 . +_:N3150b51898a54a30b8c523d53721610a . + . + "A buildType is a hint that is used to indicate the toolchain, platform, or\ninfrastructure that the build was invoked on."@en . + "Describes one a profile which the creator of this ElementCollection intends to\nconform to."@en . + . +_:Nd507d892ccf546c68470c2ad1de481bc . + . + _:Nc36cca07a48048b18bee65bd265e3473 . +_:N33e17640748a455091e7f615156e4be0 . + "A reference build system used to create or publish the package."@en . +_:N6bb457a45b8149f09614fbba0dde597c . + . + . + "A reference to the release notes for a package."@en . +_:N1931b6c2fa1e43769bda7a922ee5d431 _:Ne0ead3de0c1842e8803711c778d3de8f . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nc0cbe94b1b9f4c518494e91bc175e759 . +_:Nd72eee1dacf14634b4ccb3f926804521 . +_:N804dd6908e264d10be7ab47179d84223 . + "Used when there is a security related identifier of unspecified type."@en . +_:N49b44a8f36b14012934dd458769db5b1 . + "A collection of SPDX Elements describing a single package."@en . +_:N1e10b72106c748bf8326627b02c07313 "1"^^ . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N4daef40acaac487baa5fb20c0fd627ac . + . + "A relationship has specific context implications during an element's build phase, during development."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . + . +_:Na8d8ac54c0434708b78fe73a4d8e0660 . + . + "A tuple of two positive integers that define a range."@en . + . + . + . +_:Ned0fe992065d49dd890483be50cffa45 . +_:Nad16ba6a202e461689abc70b9fcea166 . + . + "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en . + . + . + . + _:Ndc9ca13ca7e045a890f1b0f580371051 . + . + "cwe" . +_:Ne3e78235566445608978be9329e74cc2 . +_:N4a1fc3bf9bc949a0b13c835bdca0bddb . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + "The percentile of the current probability score."@en . +_:N9b30e49ee021458b83b41fb0202c4043 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . + . +_:N353f7075a1fe48b3b7b7af086e4aa2ed . + "contains" . + . + "Property that describes the time at which a build stops."@en . + . + . +_:N497a6b43b7584ce9a497817fce159210 . +_:N3d49f1697b79484bb086d05ff0857eec _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + "software" . + "Provide the enumeration of possible decisions in the\n[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."@en . + . +_:Ncc8fbdb6574b455aa71ca75a347cd39f . + . + "coordinatedBy" . + . +_:N642c1242529241e184296a5a0b57d7d5 "1"^^ . +_:N96c77573f7d244af98fbb31a9a921415 . +_:N1183c95846404f8686047bb384b1fbb5 . +_:N24687f30f3e64312b787f409644f4343 . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb . + . + _:N3150b51898a54a30b8c523d53721610a . + . +_:N765d53a52f60469db1405497bbdeb524 _:N45733e14e2a1496b8dd8e675ad450ace . +_:N0207d8bc435b4fcf933b378f5d74d81c _:Nfbb90564d62a49c99f3ad124bf572c0a . + "The Element is configuration data."@en . + . +_:N3aae1ae126af41909469c96ead6b6227 "1"^^ . + "componentNotPresent" . + . + . + . + "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + . +_:N9512e8c2edb34dc7ad3bcac4ce63a430 _:N9600326f07e84fd0b5702dbba8fb5692 . + "low" . + "An entity that is authorized to issue identification credentials."@en . +_:N54a4d666657c40289b7665b9f8fa4d2c _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + . + . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . + "hasAssessmentFor" . +_:N2523b388c8904f2885050ee00d15f281 . + "Provides an independently reproducible mechanism that permits verification of a specific Element."@en . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 _:Ndf398217fce6424ca2d23712e71263fb . + "A software agent."@en . + "A value used in a CdxPropertyEntry name-value pair."@en . + . + _:Na0207e8ebb3546d494a226941f26b82a . + . + . + . +_:N872f874bf6a643fb922cfeb84da33004 . + . + . + "Portion of an AnyLicenseInfo representing a License which has additional\ntext applied to it."@en . +_:N96c77573f7d244af98fbb31a9a921415 . + "Specifies the safety risk level."@en . + "[Kyber](https://pq-crystals.org/kyber/)"@en . + . +_:Nbd73767485264c33bc64cc9b42c99b88 _:Na93b9a0680a145d7ad7614c15215165f . +_:N5d88af867062488cb6e9d9d48ff41920 . +_:N01b35060833a487b8f68dd5852fb7128 _:N8d9932eb554044d69adb3585d42ac4a4 . + . +_:Nc36cca07a48048b18bee65bd265e3473 . + . + . + . + . +_:N303a78ff780a48fdbcb374ff43820d99 . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nf5ff1d1055e34b2cb95f75f6c7657265 . +_:Nd74f1a1f51db45fc8a121a72f2810ce9 _:Nbd5d22a16c594086a7dab4ce2199d3be . + . + . +_:N9b28133398a64d5eb219290008f464a6 . +_:Na34b9857d3494dd3bc57ea0aac372489 _:N575a40dcf9d2470382a3cb67027db887 . + . +_:Nef779dc58efd41708d2dd810a1c22861 . + "Specifies the version of a VEX statement."@en . + . + . + "An Individual Value for License where the SPDX data creator determines that no\nlicense is present."@en . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + . + "Describes a certain part of a file."@en . + "the element follows the Build profile specification"@en . +_:N19caf49b458948aab96db18d18a37807 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N3150b51898a54a30b8c523d53721610a "1"^^ . +_:Ne0351ee38a2940df9a643908f3c04c78 . + . +_:N84fbf505fc5b4942809840c744afbc50 . +_:N5d7b7ab80ba94da78154e51e39f4b55d . + "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + . + "Provides a License author's preferred text to indicate that a file is covered\nby the License."@en . +_:N453867a1e4d041d0b9ef358011ed5898 . +_:Nc06c93e4d64345e59c0208ac0c2f799b _:Nc5aa8a1325b0473daf3d15821b492d34 . +_:Nfea77563e3c34609b220695df9edc63c "1"^^ . + . +_:N575fe651e76242bf8d3db482154b8fae . + _:N19caf49b458948aab96db18d18a37807 . + "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en . + . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N670b02a39f7e43c18d8cabf4a086ae6d . + . +_:N0a1213eddeb04e2eafef770905f9f1bd . + "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . +_:N3d0909f693c34cacbd26067f25a3cd4c . + _:Na69fc7a1c2654979ada4d85b1717874b . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . +_:Neff504856bd94814a0299fb077c1ba98 . +_:N7512c361fa6640a2a2d5027dcca31ae1 "1"^^ . +_:N4d64fe8feb16494b9674f49e196cdb1d "1"^^ . + . + _:N9b28133398a64d5eb219290008f464a6 . +_:Na9652088c7d74da4a70741160e010184 . + _:N303a78ff780a48fdbcb374ff43820d99 . +_:Nd81e7e097668428d8d37dd7470a77974 . + "An Organization representing the SPDX Project."@en . +_:N11cc93477738430e89e745f56c83f147 . +_:Nb0e55a7a3f404b718aa14c0523f748fc . +_:Nad16ba6a202e461689abc70b9fcea166 "1"^^ . +_:N60b7e732109b4d57a2174a1793e81730 . + "endOfSupport" . + . + _:Na063ca2df3034db0bf1b8b898aa3a404 . + . +_:N056b619290c944b1b9efec2e986869b0 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . + . + . + . + "clickthrough" . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . + "No assertion can be made about the completeness of the relationship."@en . + . + "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 _:N993312a33ff8406aaa62fb12f728a245 . +_:N96aafef3616e46f882877b2a7e11b757 . + "The Element is a software framework."@en . + . + _:N3aae1ae126af41909469c96ead6b6227 . + . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + "metrics" . + . + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + "patchedBy" . + _:N26e5d106c3b9457fa387974ed45155a7 . + . +_:Nf9c56978821e4d65b3c9e6089e72244f . + . + _:N4d64fe8feb16494b9674f49e196cdb1d . +_:Na4c9815bb1c74163aad85a1b13e04f13 . +_:N01a7ef65b90c4cf2a2fd910705d3bb53 . + . +_:N2dc39d16ee9f4be191ad3506bae0c216 . + . + . +_:N5a72932413d2413b80569a5fb2966e41 . +_:N10776ad90ad94042bfd598e68f215ed9 . +_:N6a47af8674814d9a92314ce9c053556a . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:Nf07f4220a2fd47bea00636caef099680 . +_:Ndd62961c42b449c7999ac09e91c55bb2 "1"^^ . + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + . +_:Nbc9ecbd1db234efabb062c64c5b1582e _:Nd348352c7de54765832cc19f3d43300c . +_:Nb757eb766bcf484dab7fcc8640520f26 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + "The `from` Element is available from the additional supplier described by each `to` Element."@en . + . + "A LicenseAddition participating in a 'with addition' model."@en . + "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en . + _:N19ffa456cd9a4738ae5406b9443c8eb1 . + "Conveys information about how VEX status was determined."@en . + "The `from` Element has been trained on the `to` Element(s)."@en . + . +_:N69cc60cd211d4ac69d884813fa143fc7 . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 . + . + . + "Enumeration of the different kinds of SPDX file."@en . + "application" . + "Identifies who or what created the Element."@en . +_:N67676f11ca184c05a0d5f6249a4b14fa . + . +_:N702ebaf549e846d0bb51a54e7a52860e _:Nb076c63c99944bff81f8ce7e21fbf841 . + "Refers to one or more Elements that are part of an ElementCollection."@en . + "The relative file name of a file to be excluded from the\n`PackageVerificationCode`."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + . + . + . +_:N2d5629b576a240eca4cbdd951a693dd9 _:Nc505579387424472888c03cc153dd107 . + . + _:Nbd4cabc421bb46b3977fcf236c7870ff . + . + "A reference to a static analysis report for a package."@en . + "container" . + "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + . + . + . + . +_:N09f51f6b10be4948ac38d31ce896aced _:N670b02a39f7e43c18d8cabf4a086ae6d . +_:Na084b549fa4a46ef9c69e235fea6cfdf _:N7d38e5ecd3ab4556b895637c8beeb598 . + . + _:N4a0643790ee647d0bf9d75f3f4f80581 . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N26e5d106c3b9457fa387974ed45155a7 . + . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . +_:Ncd772398fef24acfb9c377355aaa70e4 . + . + "testedOn" . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + "Commentary on an assertion that an annotator has made."@en . +_:N88fb6b952c0b4497afed840a2b36b7c3 . +_:N303a78ff780a48fdbcb374ff43820d99 . + . + . + "A relationship has specific context implications during the execution phase of an element."@en . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:N2cbc74620706496aa87fbc369f1b0b05 . +_:N872f874bf6a643fb922cfeb84da33004 . +_:N0912149adb0b4f64bf8c3c1266d60a4a _:N8fe0d08ca3d644c394e8af08a3875047 . + "Refers to any unit of content that can be associated with a distribution of\nsoftware."@en . + _:N3d0253c9ab6d43bd870cafd49a1aa17e . +_:N48a995c812d240c8991c7af527062228 "1"^^ . + _:N24fab7059f894755bb21ef4ddc4d0f4f . + _:Nba7479035af442ada086c0338c451097 . + . + . + "hasHost" . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . + . + . + . +_:N5bfd54b8c91b4551a09ef347685af79e . +_:N583a7c7011cd4f8383fc2b8c5f308588 . + _:N9b30e49ee021458b83b41fb0202c4043 . + _:N10776ad90ad94042bfd598e68f215ed9 . + "SPDX Project"@en . + _:Ndb15970ce7d34e878a0a7123dad52212 . +_:N8aca67d5adb046a18a3855733ab12c9b . +_:Nd507d892ccf546c68470c2ad1de481bc "1"^^ . +_:N5d88af867062488cb6e9d9d48ff41920 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N645cfb9d3c334cc1a3175307175364c7 "1"^^ . + . +_:N00a4f89addf045d28864aa6380106e8c . +_:N35748216664842588d1d2428d0238f7c _:N012999398659462aa7d4d45cfea4cd49 . +_:Ndb89662869e64a20938720be32e56b7b . +_:Na93b9a0680a145d7ad7614c15215165f _:N81a6a212754843d3aba0e84f43791e7f . + . + . +_:N19caf49b458948aab96db18d18a37807 "1"^^ . +_:N8c4178586ccf4f6aac7bc77998ce8216 . +_:Na84c1e23d6e44da4b4f3fda68fe0b3e3 _:N9b9a98064ff244dab80a08bdd5555d88 . + "Abstract ancestor class for all vulnerability assessments"@en . + "An Individual Value for License when no assertion can be made about its actual\nvalue."@en . + . +_:N0a1213eddeb04e2eafef770905f9f1bd _:Na6e92abe54d446e79e8c88579ac830f2 . + "A relationship has specific context implications during development phase of an element."@en . + "other" . + _:N25996c4894e1460a8b698f0cbef34195 . +_:Nb30a287d827e4316be15597c73c84fef _:N341f19d094bb4183a2db06364073f914 . + "query" . + _:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "The Element is an Artifact that can be run on a computer."@en . + . +_:Nfc1ba2b198a0488b97e460730d5d8314 _:Nbfc53449413c4390876a7291e180ba07 . + . + "Provide context for a relationship that occurs in the lifecycle."@en . +_:N168ff94489204ce2b3d2bcc2e291d420 . +_:N453867a1e4d041d0b9ef358011ed5898 "1"^^ . + "other" . +_:N88fb6b952c0b4497afed840a2b36b7c3 "1"^^ . + . + "The file represents a directory and all content stored in that directory."@en . + _:N4dc4509276114e519a1e36d2339cd154 . + . + . +_:N08c151d77c034260b733a9cd4fb2db47 _:N4106ddc0ab0a4a51b658689625cb4bcd . + "Indicates the amount of energy consumption incurred by an AI model."@en . +_:Ndc9ca13ca7e045a890f1b0f580371051 . +_:N026b410848804fea9d8c504126844111 "1"^^ . + . + . + . +_:N0e6424a884214886a5182405c83ce0e5 . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + . + "A mapping between prefixes and namespace partial URIs."@en . +_:N95c3ead21e6e4ecd95af23263451b25e . +_:Nb076c63c99944bff81f8ce7e21fbf841 . + "Information about the relationship between two Elements."@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . + . + "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Ncc31c01eeda0480ea00ea96b0f811739 . +_:N7c08903e22d24c6f9559062e74c8c807 _:Nfec76341615042fa920d080bb121bd66 . +_:N575fe651e76242bf8d3db482154b8fae . + "hasStaticLink" . + . + . +_:N13b712ac882f4d5ca50bb0fd516bd04d . +_:N0912149adb0b4f64bf8c3c1266d60a4a . + "When a CVSS score is 0.0"@en . +_:N8242d57d83034d40a15ec0013cc69b62 . + . + . + . + . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . +_:N92fcf21ac8a64f358f68624b0432e712 . +_:Nd34fffad560944e88cd9ddfe76e7554c . +_:Neff504856bd94814a0299fb077c1ba98 . + "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + . +_:N8242d57d83034d40a15ec0013cc69b62 _:N2c2208ee7e3d40ca97119f695308f1f3 . + . + . +_:N9919f57d67bd4992ac37a637007f56b9 . +_:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . + . +_:N872f874bf6a643fb922cfeb84da33004 _:N681b535a77a04528a517054508bb1c40 . +_:Na69fc7a1c2654979ada4d85b1717874b "1"^^ . + "A reference to the instant messaging system used by the maintainer for a package."@en . + . +_:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Na183d066b46d4b6e86d08b078d501e3d . + "directory" . + . + "Provides a CVSS version 4 assessment for a vulnerability."@en . +_:N746b944c68bf4bf39a5cdc3bf1afbba1 _:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nf562af8defe04dbc89db49905f399a11 . +_:N7135267418f04789a477e78eef34865e _:N54a4d666657c40289b7665b9f8fa4d2c . + . + . + "A license that is listed on the SPDX License List."@en . +_:Nbd4cabc421bb46b3977fcf236c7870ff . +_:N476942db27384f75af2da9e29db94014 . +_:N7381b5af92324165b38a2ef399a3d683 _:Nd6fa5fcf79af41aca71f798a61820519 . + . + . +_:N7ea991bcafe746f8ae7f965a4039cbc4 . +_:Nb3d9d9553ea04f749108d2000dfc3953 . +_:N750e6ba1e1744f44956807fd65a5a4f7 . + . + . + . + "Specifies a data package and its associated information."@en . +_:N6ca95996c3ba43bdbff56b6d5b9fdab9 _:N09f51f6b10be4948ac38d31ce896aced . + . + "complete" . +_:N02637b6a678241cda6ec95b576156ac2 . +_:N6e64ceb369f04614bd3449d6d9bea0d1 _:Ne16b834cedfa4b8db4d362a45561064d . +_:N670b02a39f7e43c18d8cabf4a086ae6d _:N4a71e77d78634c69959e3e011db657c9 . + . +_:N642c1242529241e184296a5a0b57d7d5 . + . +_:N7c08903e22d24c6f9559062e74c8c807 . + "module" . +_:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + "The Element refers to a chipset, processor, or electronic board."@en . + "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + "high" . +_:Neff504856bd94814a0299fb077c1ba98 . + _:N2523b388c8904f2885050ee00d15f281 . +_:N8fe0d08ca3d644c394e8af08a3875047 . +_:N600baa7cc72e418cac29838b2bb675b8 . +_:Nc21c14ad1d3a4e3ea9fc14563d646d8d "2"^^ . + . +_:N84fbf505fc5b4942809840c744afbc50 . + "Indicates presence of the field."@en . + . +_:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N388a67e4decf423d92132d6f8ca8791d _:N0506962c2ba748529cc29fdcb1a61bce . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + . + . + "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + "Describes relevant information about different steps of the training process."@en . +_:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nef779dc58efd41708d2dd810a1c22861 . + . + . + . +_:N5fdc75b020564411a5c638c9aa7169b1 . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d "1"^^ . + . + "framework" . + "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . +_:N99de8e9db44844b5a9d11b197386f3d0 _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd696d0bece9045cfa929993fc189dab6 . +_:Nf91d5c31a6274b259ae9d3da7de37c4d . +_:N0530f2e80adb4606aeaa0ee0c0b381af _:N2b4511fa0df849dca000a39ac34c254a . + . + "vcs" . + "Describes a sensor used for collecting the data."@en . + "data type is not known."@en . + "Links a vulnerability and elements representing products (in the VEX sense) where\na fix has been applied and are no longer affected."@en . + . +_:N02429c72607846619a4d3bc4f9e9e971 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 "1"^^ . + . + . +_:N583a7c7011cd4f8383fc2b8c5f308588 . +_:N5234c2f9e59a42d9867dd1846c82c769 . + . +_:N3a5f5817b005498690770268a7749990 _:N53e150822c694617a126e0d67cfe88d2 . + . +_:Ncd772398fef24acfb9c377355aaa70e4 . +_:N5ff41cce72fe443c82fe25e80c38d155 . +_:N92aedbc611024e52983c2e9da6fdb503 "1"^^ . + . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:Ne16b834cedfa4b8db4d362a45561064d _:N19bf11d3eb754e10bd676b9b7780555e . +_:N645cfb9d3c334cc1a3175307175364c7 _:N316e8b195aee413da3f8a16b55477afe . + _:Nc68e4e19132d4f32946d541ef17aaf0f . +_:Nba1a37de924c499f9ea9e93d8961d20a _:Nd8636a05db834b139d4b2d9900e807b3 . + "Makes no assertion about the field."@en . +_:N1411c3ed7f0d479e9873248eb22f62f2 . +_:Nf25ca42c5bdc464f96d7d59ad9fcbf86 _:Nc06c93e4d64345e59c0208ac0c2f799b . +_:N918ee014e9d04d56bb2c1642fd51a78f . + "References the Element on the left-hand side of a relationship."@en . + . +_:N1732034f40cb4a83b62ae814a97635b1 . +_:N5db3bc3ac4ca4493a796356af601403e _:N0039cd20d11f4e1eb92b14040fe9d2ab . + . + _:N49b44a8f36b14012934dd458769db5b1 . + "A name used in a CdxPropertyEntry name-value pair."@en . + . +_:N0eee4677557545a6b9165efd2364e418 . + . +_:N24687f30f3e64312b787f409644f4343 . + "A license addition that is not listed on the SPDX Exceptions List."@en . + . + "sha512" . +_:N6484abf63505400facffdf4a86936716 . + "Describes the type of annotation."@en . + "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . +_:N164dbad8168a495a98820f4a532bad8c . + . + "Provides an exploit assessment of a vulnerability."@en . +_:N5b173aa6ae6e4f6fbdb84567ce0dd388 . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . +_:Nd5b0cc3893294e8b9a546e75d437ff15 . + . +_:Nd4b47d4885624e31ab7ede832237afeb . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "the element follows the Core profile specification"@en . +_:Na0207e8ebb3546d494a226941f26b82a . + . +_:N8fe0d08ca3d644c394e8af08a3875047 _:N5f901838dbd947f0aef2c3a4486db889 . + "The name of a relevant standard that may apply to an artifact."@en . + "video" . + "The `from` Element has been copied to each `to` Element."@en . + . +_:Nd81e7e097668428d8d37dd7470a77974 _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + "hasOptionalDependency" . + "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + _:Nd4b47d4885624e31ab7ede832237afeb . +_:N4740a545730245d7b9106bd4ffc8582c . + . + . + "Abstract class representing a license combination consisting of one or more licenses."@en . +_:N4a0643790ee647d0bf9d75f3f4f80581 . + "core" . +_:Ne55baec5fd904832ad3e305685422c87 _:N5f88e1becb864ed4b48bf6a4398f3638 . + . +_:Nd8636a05db834b139d4b2d9900e807b3 _:N02216a682b174628b5883d37733d43f4 . + . +_:N5a72932413d2413b80569a5fb2966e41 "1"^^ . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + "Indicates the type of support that is associated with an artifact."@en . +_:Nfec76341615042fa920d080bb121bd66 _:N7f32ec55b71f438fa081e1ea71e23e12 . +_:Ndb4e54e4ff284342bf2f11f51d7f2567 "1"^^ . +_:Nfea77563e3c34609b220695df9edc63c . + . +_:Nefba3a71506d41cfabbc865580be12f7 . + . + "The `from` Element is documented by each `to` Element."@en . +_:N606fa8b8d1d849bc90c0d4a759ca18c6 . + "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . +_:Nc1f593d31b694f8d899bab4cfafbc332 . + . + . + "directDownload" . + "The Element is a bill of materials."@en . + . +_:Nd4b47d4885624e31ab7ede832237afeb "1"^^ . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec . + . +_:N33e17640748a455091e7f615156e4be0 . + "timeseries" . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc . + "Specifies the type of the external reference."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + "2024-04-05"^^ . +_:Ndb15970ce7d34e878a0a7123dad52212 "1"^^ . +_:N316e8b195aee413da3f8a16b55477afe _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + . +_:N0525f39f8ddf4826a2a11f9086af43f8 _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + . + "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + . + . + . + "Provides information about the creation of the Element."@en . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N72025856b2c04aedb921459d28b8f3a5 . +_:N303a78ff780a48fdbcb374ff43820d99 . +_:N72025856b2c04aedb921459d28b8f3a5 _:Nf5c2326720d14f579097f3ab47e8c762 . + "altDownloadLocation" . + . + . + . +_:N93bfbd075cd04cd190f57aa7a8d728c1 . +_:N5dc7ad7b328945158bb2c61ac16e194c _:N0912149adb0b4f64bf8c3c1266d60a4a . + . + . + . + . + . + . + . +_:N795110769b4a40288bd376f538317c4c . + "dynamicAnalysisReport" . +_:N26e5d106c3b9457fa387974ed45155a7 . + . + . +_:Nc5aa8a1325b0473daf3d15821b492d34 _:Ncf95e811579f435d8190022c27ddc51e . + . +_:N6455bf8bc0534e40a8203b71244036bd _:N2ad096761e3044fcb326834ae006af13 . +_:Nd6fa5fcf79af41aca71f798a61820519 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + . + . +_:N8aeda8c772e348afb93afc3dc5457355 . + "The Element is a container image which can be used by a container runtime application."@en . + . + . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 "1"^^ . +_:N15f27dd5aa464b16b06fd5927807179d . + "Specifies the licenseId that is preferred to be used in place of a deprecated\nLicense or LicenseAddition."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 "1"^^ . +_:N6faa0ec40c2944cc96365e0200f91bc7 . +_:N2b5a3ed5442042b6b9ecf776b63ca010 _:N35f6a1c62bd343da8432836cbbbd8d0e . + . + "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "act" . +_:N92fcf21ac8a64f358f68624b0432e712 . + . + . + "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + . + . +_:N8dfde768ccad4b2b91f251f73ad6cf1b _:N0a1213eddeb04e2eafef770905f9f1bd . + "Captures the threshold that was used for computation of a metric described in\nthe metric field."@en . + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 . + . +_:Nf0f7baf6832e47c7a1ec5c0cb9679eeb _:Ndb89662869e64a20938720be32e56b7b . + . + "Specifies the SPDX License List version in which this license or exception\nidentifier was deprecated."@en . + "A collection of Elements that have a shared context."@en . +_:N87a01dfcca5f46d5a1312f1f1f5b2cd3 _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + . +_:N82d87d74437f447f8c64422e7639002d _:N8b832a0c38964c63b34ddf5c0285dbe7 . +_:Nf1da170952db48feafb61cf8eea0c317 . + . + . + . + "Enumeration of the valid profiles."@en . + . +_:Nd8636a05db834b139d4b2d9900e807b3 . + "Captures the size of the dataset."@en . + . + "underInvestigationFor" . + . + . + "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . +_:Nda2c2ba3d01c418691e78e82ec5ab9d6 _:Nabf8267e85fe497f80f96eaecb2a8ecc . + "Defines the original host file that the snippet information applies to."@en . +_:Nb97582dc84eb41e1aea78c6e5c7640d5 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a _:N28454dc7d61d47bd9f19e037f20819ed . +_:N5546070c54224ce482c3cbd8b3c5d898 _:Na5a947182f8f431690f104df52b37ae4 . + . + "mavenCentral" . + "Uniquely identifies an external element."@en . + "sourceArtifact" . + . + "Identifies all the text and metadata associated with a license in the license\nXML format."@en . + . + . +_:Ndf280172f0834544a7759efee893b7d1 . + . + . + . + "Provides an IntegrityMethod with which the integrity of an Element can be\nasserted."@en . + "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + "Describes a relationship between one or more elements."@en . + . + . + _:N872f874bf6a643fb922cfeb84da33004 . +_:Nc68e4e19132d4f32946d541ef17aaf0f . + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . +_:Nb121f71437a9448ab9d30679e6c6e290 . +_:N795110769b4a40288bd376f538317c4c _:N1288fc1d432c42e3a6691ec85b15b7f5 . +_:N20c73971e3d9412097f90918b0fbd9d0 "1"^^ . + _:N3da1b725121949138220323e55721af3 . + . +_:N7634a4c745c849d5b147ccbf41ef2bcb _:N69cc60cd211d4ac69d884813fa143fc7 . + "Specifies an Element contained in a piece of software where a vulnerability was\nfound."@en . + . + . + "issueTracker" . + . + . +_:Nc849cbed1d4d47158d3a8ce5af53fc2a "1"^^ . +_:Nf679cce397cb41148e4dbc0de457788b . + . + "Contains a URL where the License or LicenseAddition can be found in use."@en . +_:N56df7be59075471b9d1466398865afdd . +_:N7d38e5ecd3ab4556b895637c8beeb598 . + . + . + . +_:N51a6abe36bbb4a9a8cce23555b0fa72a . + "red" . + . + "other" . + "medium" . + . + "privacyAssessment" . + . + . +_:N1dede72d56c347b085cf801844a9768c . + "A collection of SPDX Elements that could potentially be serialized."@en . + "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + "noSupport" . +_:N91f490513b4b406b85ec22decdb5274a . + "low" . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + . + _:N48a995c812d240c8991c7af527062228 . +_:N349791578bd441d7b8f76b4673275235 . + . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + _:Nd8b38be0c57d489a82194c062bbe0b40 . + . + . + . + . + . + . + . +_:N2cbc74620706496aa87fbc369f1b0b05 . + "crystalsDilithium" . + "affects" . +_:Na242505ccf884ef29a794e57c9d3ddc8 "1"^^ . + . + "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + . +_:Ncd5a93b6120a456e8dc0d3aa1b1a461c _:Nd6035645b90646908c1881b4d968ce2e . +_:N3da1b725121949138220323e55721af3 "1"^^ . + _:N1dede72d56c347b085cf801844a9768c . + . + . + . + "copiedTo" . + . + . +_:N2a5d53abe06a466584993d22f4218cac . +_:Nba7479035af442ada086c0338c451097 _:Na9652088c7d74da4a70741160e010184 . + "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + . +_:Ndc9ca13ca7e045a890f1b0f580371051 . + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 _:N5c7bcd96bfe24354b9199d05991a1c3c . + . +_:Nd9b0e8688faa4db8bc021fe50af253fe . + "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + "Specifies the CVSS vector string for a vulnerability."@en . + . + . +_:N7fc15c5a65f84366ada3c30ddb250517 _:Naf98619f104747d192028a17f0ecd8bb . +_:Na71e0164a5d7491f82b21b32a559f2a4 _:N093bbb61d9594baa8b978ad303aad6af . +_:N2a5d53abe06a466584993d22f4218cac . + . + "Artifact representing a serialization instance of SPDX data containing the\ndefinition of a particular Element."@en . + . + "data is stored in tabular format or retrieved from a relational database."@en . +_:Nd25a98977037415f94236e4881c554c0 . + . + "The Element is data."@en . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nfaab51f8ebca452e84e1031a425be7d5 . +_:Nacf93e2dadec4cf5a6eddab055d67599 . + _:Nca3d4237e69846fa81bc53dc43b6029e . +_:Nb831ba68859845819894bc24124f2493 . + . + . +_:Ned0fe992065d49dd890483be50cffa45 "1"^^ . +_:N6bf989b95c5e498e988052131700d5e6 "1"^^ . +_:N1f1d4556eef644b9976392b54821e832 . + "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + "Provides a detailed description of the Element."@en . + "The Element is a module of a piece of software."@en . +_:Na9652088c7d74da4a70741160e010184 _:Nb94c57793202400e991c908c29f04c8d . + . +_:Nf34b3b1798cd4b95ad7460d818440421 . + "A relationship has specific context implications during an element's testing phase, during development."@en . +_:N3ecca35aacff49e881d71ec1ce7aeb60 _:N40360ba6386b4532be67e616fc8cd204 . + . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:N12791c5f96074c62a3ed255af776b87b . + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + "Describes what the given dataset should be used for."@en . + . + . +_:Na183d066b46d4b6e86d08b078d501e3d . + "noAssertion" . + . +_:N3b580065725749b7ab5e332a55260a05 _:N0eee4677557545a6b9165efd2364e418 . +_:Nd4b47d4885624e31ab7ede832237afeb _:N6cb4c4347f154af1b5c9d61bdb1d6485 . + . + . + . + "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + "runtimeAnalysisReport" . + . + "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + . + . + "sha3_512" . +_:N48a995c812d240c8991c7af527062228 . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 "1"^^ . + _:Ndaae4f6aabcc43579b940eeb55b7fa09 . +_:Nc06c93e4d64345e59c0208ac0c2f799b . + "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . +_:Na5ef2f7d581a4fbeab399f28f36514fc . +_:N026b410848804fea9d8c504126844111 . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + . + "other" . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . + _:Nfaab51f8ebca452e84e1031a425be7d5 . + . +_:Nd8b38be0c57d489a82194c062bbe0b40 . +_:Ndf280172f0834544a7759efee893b7d1 . + "the element follows the simple Licensing profile specification"@en . +_:N97f27abc23b9427f8445614385fdd5e7 . + "hasDependencyManifest" . + _:Na2ab1463e071402b941a055cf25405d0 . +_:N6d5b2261790642829d74aecc96d7e681 . +_:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 _:N7c577594e1734b4ebabc9b18761d5162 . + . +_:Ne3c684285049449e9ee58f318c943f4f . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "The Element is a single or a collection of source files."@en . + . + "invokedBy" . + . + . +_:N91f490513b4b406b85ec22decdb5274a _:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:N20c73971e3d9412097f90918b0fbd9d0 . +_:Nbb4d130582c44c00bdc80ffc03d8dde6 . + . +_:N5e38eb28cfa046dfa2ad5d2c441ae3db _:Nf91d5c31a6274b259ae9d3da7de37c4d . + "Property describing the start time of a build."@en . + _:Nad16ba6a202e461689abc70b9fcea166 . + "dataset" . + . + "Abstract class for additional text intended to be added to a License, but\nwhich is not itself a standalone License."@en . +_:Nf71e260bcc9940d2b8cb0fdf962a1454 . + . + . +_:N331685f17119458e9f8d03e1032a587d . + . + . + "security" . +_:Nc5aa8a1325b0473daf3d15821b492d34 . +_:N42c7e772b0ff4d5d9a97a8c3334d8a58 _:N1931b6c2fa1e43769bda7a922ee5d431 . +_:N00a4f89addf045d28864aa6380106e8c . + . +_:Na69fc7a1c2654979ada4d85b1717874b . + . + "md5" . + "The Element is a file system image that can be written to a disk (or virtual) partition."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:N473befceadbe42d0bd9069dd0ce4699b _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + . +_:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + _:N56df7be59075471b9d1466398865afdd . +_:Na7d9beb4671848ceafe78da042cf29b8 _:Nf88be8ef2ebb4b8284efc3143b301313 . +_:N4106ddc0ab0a4a51b658689625cb4bcd _:N3ecca35aacff49e881d71ec1ce7aeb60 . + . +_:N8a427ef4e2c34b2980a778d817ac3ca2 . +_:N18ddc7ea6abf4cb8a96fd35f1adaa3ec "1"^^ . + . + . + "Provides an EPSS assessment for a vulnerability."@en . + . + "purchaseOrder" . +_:N6999f1ba66054cb9a6683482a6046870 "1"^^ . + "Maps a LicenseRef or AdditionRef string for a Custom License or a Custom\nLicense Addition to its URI ID."@en . + . + "The highest level of risk posed by an AI system."@en . + "sha224" . + "trainedOn" . + _:N6c6d7f192a574d27bdc34c9ab2cafe1f . + "A reference to binary artifacts related to a package."@en . + "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + "Describes all the preprocessing steps applied to the training data before the\nmodel training."@en . + . + "Designates elements as products where the impact of a vulnerability is being\ninvestigated."@en . + . + "crystalsKyber" . +_:Ne1807e7da3dc42d8921080afa2df652f . +_:N624418f1db494f7ebe03fa364190d21d . +_:N9b9a98064ff244dab80a08bdd5555d88 _:N24390832561247ea9edbcfeca24f67aa . + . + "A license expression participating in a license set."@en . +_:Nd685430b1a9c44d6abb820e3d22ad9fc . +_:Na4c9bfc328f44f7a82b4bb6b0d500714 . + . + . +_:N92b9f222f5b94268a55c169346f957f1 "1"^^ . + . +_:N056b619290c944b1b9efec2e986869b0 . + "development" . + . +_:N0506962c2ba748529cc29fdcb1a61bce . + "Provides the location of an external reference."@en . + . + _:N0265fd9255b84ae094abb5c54616ae2b . + "diskImage" . + "hasAddedFile" . + . +_:Nfaab51f8ebca452e84e1031a425be7d5 . + _:N61923a50c86b4ba0b8957d6b10968ce2 . +_:N4a0643790ee647d0bf9d75f3f4f80581 . +_:Nc07374747c9448faae0e1e2622db1d7d "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . +_:N2caaec60ce124c8091e058eea48622ba _:N918ee014e9d04d56bb2c1642fd51a78f . + . +_:N5db3bc3ac4ca4493a796356af601403e . + . + . +_:N6999f1ba66054cb9a6683482a6046870 . + . + "source" . + "Property that describes the URI of the build configuration source file."@en . + . +_:N9b073a51b7934d96882a3d7b2516e6ee "1"^^ . + "Specifies the time from which an element is no longer applicable / valid."@en . +_:N575a40dcf9d2470382a3cb67027db887 _:N600baa7cc72e418cac29838b2bb675b8 . + . +_:N08f35fbea3f34a129863ad8e6b88a5a1 . +_:Ndba01dc226ee49c3be1b757c1787cb43 _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + . +_:N3150b51898a54a30b8c523d53721610a . +_:N40360ba6386b4532be67e616fc8cd204 _:N3c78df17f57a45d7b66ef27d1d0b60be . +_:Nb30a287d827e4316be15597c73c84fef . + . +_:N7ce5215fd77b4391bb0faf9a289c9651 . +_:Na4c9815bb1c74163aad85a1b13e04f13 . + . + . +_:N19caf49b458948aab96db18d18a37807 . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 "1"^^ . + . + . +_:Nef0b82c6d2ef4a5c8dbd141212401b13 . +_:N46ba8ef3fde1433dbe3bd4d23fa74fec "1"^^ . + "gitoid" . +_:Nfc42797a854d4008a99f6062c2875fc3 _:N3a5f5817b005498690770268a7749990 . + "A place for the SPDX document creator to record a website that serves as the\npackage's home page."@en . + "md6" . +_:N7fc15c5a65f84366ada3c30ddb250517 . + "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + . + "An SPDX Element containing an SPDX license expression string."@en . + "lite" . + "availableFrom" . +_:N9919f57d67bd4992ac37a637007f56b9 _:Nf562af8defe04dbc89db49905f399a11 . + "chat" . + . +_:N30178f0a784c43079551a63b841da0ba "1"^^ . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:Nb757eb766bcf484dab7fcc8640520f26 . + "Records the measurement of prediction quality of the AI model."@en . +_:Ne2ff293b6d084635bd69a6ad308a4ea9 . +_:N24687f30f3e64312b787f409644f4343 . +_:N97f27abc23b9427f8445614385fdd5e7 . + . + . + "qualityAssessmentReport" . +_:Nad16ba6a202e461689abc70b9fcea166 . +_:N7c1afce8b8f14d94b7b00b67814f4a92 . +_:N3484c741d91a4723b5c7f52d12122e53 _:N8dfde768ccad4b2b91f251f73ad6cf1b . + . +_:Ne55baec5fd904832ad3e305685422c87 . + _:N08f35fbea3f34a129863ad8e6b88a5a1 . + "Megajoule."@en . + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . +_:N8b832a0c38964c63b34ddf5c0285dbe7 _:N7b217a3de6634154b32708f11e4a7f89 . + . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N8aca67d5adb046a18a3855733ab12c9b . + . +_:N2c2208ee7e3d40ca97119f695308f1f3 _:N218b2297f9704d99bf1b9e818945ce5c . + "A collection of Elements, not necessarily with unifying context."@en . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 "1"^^ . + "Copyright (C) 2024 SPDX Project"@en . + "A reference to a certification report for a package from an accredited/independent body."@en . + _:N4daef40acaac487baa5fb20c0fd627ac . +_:Nc12aef8332fd4b9484195f299f484175 . + _:Ncaa9a447e341490894b8ea06dc485a0c . +_:N29537a8625514225965436aae0e64d9f _:N6bb457a45b8149f09614fbba0dde597c . +_:Nd34755ea58bd4430b6e06edfe49d3836 . + . + "The Element contains a set of changes to update, fix, or improve another Element."@en . + "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . +_:N56bea2883781491d89c9330a875e5e7d . +_:Na6e92abe54d446e79e8c88579ac830f2 _:N6a47af8674814d9a92314ce9c053556a . + . + _:Nb831ba68859845819894bc24124f2493 . + "Specifies the level of support associated with an artifact."@en . +_:Ne0ead3de0c1842e8803711c778d3de8f . + . + . + "data" . + . + _:N2cbc74620706496aa87fbc369f1b0b05 . + "Specifies the exploit catalog type."@en . + . +_:N6999f1ba66054cb9a6683482a6046870 . +_:Ne08cc9309fbc4c70a85a57e7133b72c9 _:Nf253c5f3fc0f40728e3b713da72f534f . + "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + . + . + . + . +_:Nb29082bbf3a54faf833061815ecea3cd _:Nb0e55a7a3f404b718aa14c0523f748fc . + . + . +_:Nb5d70b9706cb46a29801cbcb49dffef6 . + . + . +_:Nfe008f6511404b5b9d251ae6f0e14f51 . +_:N4d64fe8feb16494b9674f49e196cdb1d . + . + "vulnerabilityDisclosureReport" . + "A reference to an alternative download location."@en . + "Provides an unambiguous mechanism for conveying a URI fragment portion of an\nElement ID."@en . + "Connects a vulnerability and an element designating the element as a product\naffected by the vulnerability."@en . +_:Nb964a7ec32c84ad9a7e5068cf4f02822 . + "sha256" . +_:N1fa9bc1c7b534e18a5a523e72f951ec4 . + _:N2ceaa2ca925c4e80b9d615666e91bb76 . + . +_:Nb41bc224042f48e3b42c657cad654e89 . + . +_:N7fc15c5a65f84366ada3c30ddb250517 "1"^^ . + . + . + . + . +_:N29537a8625514225965436aae0e64d9f . +_:Nefb954041ff74e1c981f465bcaab5d3b _:N12791c5f96074c62a3ed255af776b87b . + . + "test" . + . + . +_:Nc505579387424472888c03cc153dd107 _:N35748216664842588d1d2428d0238f7c . +_:N09d41b24e37944889b085f3a5dec27a2 _:N4740a545730245d7b9106bd4ffc8582c . + . + "Impact justification label to be used when linking a vulnerability to an element\nrepresenting a VEX product with a VexNotAffectedVulnAssessmentRelationship\nrelationship."@en . +_:N88d076d5560e44378fc63f2196d3e9be _:N7c08903e22d24c6f9559062e74c8c807 . +_:N18770e9733c8452f9533b746b1378584 . +_:Na34b9857d3494dd3bc57ea0aac372489 . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Nb831ba68859845819894bc24124f2493 "1"^^ . + "A reference to a Software Composition Analysis (SCA) report."@en . +_:N559cf862cf484b388a29cbb3e04d2539 _:Nf9e398de7c23460c95e7fec63c92065d . + "binaryArtifact" . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb "1"^^ . + "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + . +_:Nbe7b313a45b948c6a406f37ccd2c5ee6 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . + _:N39208ce6d6704289bce5a33c713589ba . +_:Nb9bb8e59941d436cb193d8d8ecd38cce "1"^^ . +_:N62cbeb231bc544a7ac8aab5e8217d804 _:N6e64ceb369f04614bd3449d6d9bea0d1 . + "The relationship is known not to be exhaustive."@en . + _:Ne452fc8d239747848f49c2ac0d8e39d8 . +_:N6841333db1c2440083b2a1e012968a62 "2"^^ . + "Used to associate a `from` Artifact with each `to` Vulnerability."@en . +_:N9ebeb1bc85e741fb8d52f00b17dd5edb . + . +_:N308fb6485f7d4864923946d7ba83b984 "1"^^ . + "Specifies the type of an external identifier."@en . + "Defines the line range in the original host file that the snippet information\napplies to."@en . + . + _:N1411c3ed7f0d479e9873248eb22f62f2 . +_:N2ceaa2ca925c4e80b9d615666e91bb76 . + "vulnerableCodeCannotBeControlledByAdversary" . + "Class that describes a build instance of software/artifacts."@en . + "md4" . + . +_:Nd696d0bece9045cfa929993fc189dab6 . + _:N0e6424a884214886a5182405c83ce0e5 . +_:N4b9123c429a143928240efffd877c09e . +_:Nc68e4e19132d4f32946d541ef17aaf0f "1"^^ . + . +_:N026b410848804fea9d8c504126844111 "1"^^ . +_:N6720587ff9a14662ba139a3cc04633d6 . + . + . + . +_:Na0207e8ebb3546d494a226941f26b82a "1"^^ . + . + . + . + "cpe23" . +_:N24fab7059f894755bb21ef4ddc4d0f4f . + "file" . + "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . +_:Nc27cd84531894867a3501b47035a2c04 _:Nf1da170952db48feafb61cf8eea0c317 . +_:N26e5d106c3b9457fa387974ed45155a7 "1"^^ . + . + . + "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + . +_:Nbfec1cd5e43649cba6485b1a01ec1b68 . + "Used when the type does not match any of the other options."@en . + . +_:N645cfb9d3c334cc1a3175307175364c7 . + "A probability score between 0 and 1 of a vulnerability being exploited."@en . +_:Nbc8ad111179e4d28aeca12d049d01869 . +_:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . +_:N2b4511fa0df849dca000a39ac34c254a . +_:Nf88be8ef2ebb4b8284efc3143b301313 . + . +_:Ne4b5d8545c4c40c394f6fcfbf82ac649 . +_:N8a3126cc6d804604930d39f15a0a7954 . + "The Element is a software application."@en . + . + . + "Specifies the time an artifact was released."@en . + . + "data is audio based, such as a collection of music from the 80s."@en . + . +_:N6bf989b95c5e498e988052131700d5e6 . +_:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . +_:N6c6d7f192a574d27bdc34c9ab2cafe1f "1"^^ . + . + . + "Defines the end of a range."@en . + . + "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + _:N135abe5aa7184697abfa5b1134f74635 . + "noAssertion" . + _:N6d5b2261790642829d74aecc96d7e681 . + . + . + _:N24687f30f3e64312b787f409644f4343 . +_:N642c1242529241e184296a5a0b57d7d5 . +_:N02429c72607846619a4d3bc4f9e9e971 _:N8a3126cc6d804604930d39f15a0a7954 . + . +_:N4a71e77d78634c69959e3e011db657c9 _:N897103c5db374d44a639af1692f596b0 . + . + . + "The `from` Element is an ancestor of each `to` Element."@en . + . + . + . + . +_:N7512c361fa6640a2a2d5027dcca31ae1 . + "documentation" . +_:N48a995c812d240c8991c7af527062228 . + . +_:Nc12aef8332fd4b9484195f299f484175 _:Nf4e6c1ca88814f8983b689a6d618c839 . +_:N8d94ac10bc5f422ca55e9aa451328fd1 _:N11d2469065ae40ba876541501b6ad701 . +_:N83380edfda0143559b20b6f86b17c17a . + . + . + . + . +_:N33cee511d45243669ca60bd0a0f4a3a9 . + . + "A relationship has specific context implications during an element's design."@en . + "build" . + . + . + . + "Describes the anonymization methods used."@en . + "Points to a resource outside the scope of the SPDX-3.0 content\nthat provides additional characteristics of an Element."@en . + . + _:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:N9539a3aa8f2640ccbf5e3147b95d0acd . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 . + _:N46ba8ef3fde1433dbe3bd4d23fa74fec . +_:N99c1538993cb4cc0a17aa9ebc04745e5 _:N5d7b7ab80ba94da78154e51e39f4b55d . +_:N8919fac9e03440b19957656e4c6d5f47 . + "Specifies an AI package and its associated information."@en . +_:N49b44a8f36b14012934dd458769db5b1 . +_:Nf0f8e43d5c7b417bb04959276983ea1c . +_:N056b619290c944b1b9efec2e986869b0 "1"^^ . + _:N8a427ef4e2c34b2980a778d817ac3ca2 . + . +_:Nbc8699aa0f544965affe9ba57e69fa78 _:N5484226f71e247459aecae3701f31924 . + "When a CVSS score is between 0.1 - 3.9"@en . +_:Na242505ccf884ef29a794e57c9d3ddc8 . + . +_:Nfec76341615042fa920d080bb121bd66 . + . + . + "hasExample" . + . + _:Nce1c9f7707b749df9c04405465f5d693 . +_:N832cd397b3524a16ae0417e09ab5b40e . +_:N33bcc4b85bee4aa5a17cdd2efbef8922 . +_:Ndc1cec228c454b62a5ab7eee0eab8995 _:N7634a4c745c849d5b147ccbf41ef2bcb . + . +_:Nac7de1144825418b96a3c43ff6d678a6 . +_:N0786949c6ae949ca971b0870a39e5628 _:Nfc1ba2b198a0488b97e460730d5d8314 . + . +_:N84fbf505fc5b4942809840c744afbc50 "1"^^ . + . + _:N53d06bdaf9464b0fbd454088aee08786 . + "Provides relevant information about the AI software, not including the model\ndescription."@en . + . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . +_:N1dede72d56c347b085cf801844a9768c _:N1dafd5bc3b6040e490dfb6830c66802d . +_:N1192103857734e528f997dca990b3645 _:Nd72c256eb46a430db7454aad221ffc59 . + . +_:N8919fac9e03440b19957656e4c6d5f47 "1"^^ . + . +_:N0e6424a884214886a5182405c83ce0e5 . + "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + . +_:N15f27dd5aa464b16b06fd5927807179d . + . + . +_:Nba7479035af442ada086c0338c451097 . +_:Nc68de2290dec4037b97bb40ca8c0adb1 _:Nd34fffad560944e88cd9ddfe76e7554c . +_:N7c00958b8c7c491d82e976dea47764ee _:N5ff41cce72fe443c82fe25e80c38d155 . + "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + _:N749163c9109e4fdaadb44dbb77f4bed4 . + . +_:N4c52d9d036934841b17eac13b27a39f8 _:Nbc9ecbd1db234efabb062c64c5b1582e . + "Provides a numerical (0-10) representation of the severity of a vulnerability."@en . + . + . + . + . +_:N6bf989b95c5e498e988052131700d5e6 . + . + "foundBy" . +_:N9e907f1b2a0a4dbfa462bb2801f85a99 _:N1192103857734e528f997dca990b3645 . + "megajoule" . + "Identifies the full text of a LicenseAddition, in SPDX templating format."@en . + . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + . + _:N33bcc4b85bee4aa5a17cdd2efbef8922 . + . + "Specifies the type of the content identifier."@en . + . + "Captures the domain in which the AI package can be used."@en . + "riskAssessment" . + . + _:N8aca67d5adb046a18a3855733ab12c9b . +_:N2d5629b576a240eca4cbdd951a693dd9 . +_:N7b217a3de6634154b32708f11e4a7f89 _:Nc0cbe94b1b9f4c518494e91bc175e759 . + "Records the time when a recommended action was communicated in a VEX statement\nto mitigate a vulnerability."@en . +_:N9b28133398a64d5eb219290008f464a6 . +_:N8919fac9e03440b19957656e4c6d5f47 . + "A key with an associated value."@en . + "vulnerableCodeNotInExecutePath" . +_:N95a2e8e0514048c496ba86d6678afb52 . + . + . + "Gives information about the circumstances or unifying properties\nthat Elements of the bundle have been assembled under."@en . + "Specifies a vulnerability and its associated information."@en . +_:Ne3e78235566445608978be9329e74cc2 . + . + "Identifies the name of an Element as designated by the creator."@en . + "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . +_:Nbeb8b7d55cf74321942fb0ae3da5add9 . +_:Nca3d4237e69846fa81bc53dc43b6029e . + "other" . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nc8cdfd8c3ff74b469faab892beaa7bd5 _:Nb121f71437a9448ab9d30679e6c6e290 . +_:N604da09912b74a828b98bb6b28fbf0a7 . +_:N7b217a3de6634154b32708f11e4a7f89 . + . + "trackStar" . + . +_:N19ffa456cd9a4738ae5406b9443c8eb1 . +_:N4feeea92771943cf9cdc1cb0e5a19eb8 _:N1732034f40cb4a83b62ae814a97635b1 . +_:N722b841e0cc144789cdd7e01a5a50ea9 . + "An individual human being."@en . + "A canonical, unique, immutable identifier of the artifact content, that may be\nused for verifying its identity and/or integrity."@en . + . + "Represents the energy quantity."@en . + . + . +_:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nd34fffad560944e88cd9ddfe76e7554c . + "[Dilithium](https://pq-crystals.org/dilithium/)"@en . +_:N19ffa456cd9a4738ae5406b9443c8eb1 "1"^^ . +_:Nb94c57793202400e991c908c29f04c8d _:N60b7e732109b4d57a2174a1793e81730 . + . + . + "fixedBy" . +_:N30178f0a784c43079551a63b841da0ba . + "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + . + "Specifies the type of an annotation."@en . +_:N5f88e1becb864ed4b48bf6a4398f3638 . +_:N1904cd4ccd84473a8555c9f0885877ef . +_:N1e10b72106c748bf8326627b02c07313 . +_:Nb8f515d8797c45b7894e3e707f5223fd _:N6484abf63505400facffdf4a86936716 . + "The Element is documentation."@en . +_:Ne1daaa3e8de142d9b4b0399fc62bc270 _:N5aebbc4f9aa74a9ca8a930203a1284f2 . +_:Na1a58d858f5445009e4e9c1c79b01ee8 . +_:Nbd5d22a16c594086a7dab4ce2199d3be _:N91f490513b4b406b85ec22decdb5274a . + "hasOptionalComponent" . + . +_:N5c52044e0e91489480dcbc1b1bb7e350 . +_:Nfaab51f8ebca452e84e1031a425be7d5 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + . + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . +_:N50272c7539ef4c818bf3bccae2d7a4e7 . + "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . +_:N681b535a77a04528a517054508bb1c40 _:N4252a866980f4a839fad017a197dc8af . + . +_:N47bf567d302048459f09bc6f9e280b5e _:Nbed0dcc3c778406db4d3f6eca8c4c177 . +_:N624418f1db494f7ebe03fa364190d21d . +_:N31ca4e8daaef47e2b5fa1bf4eaafec63 _:N042b9bb4151c4219ae35ea4665b1cb85 . +_:Neea78b34b53645d9b977d4dafb032fbb . + . +_:Na6ee2b8d1d624e21ae8b60f60a68d84d . + _:Neff504856bd94814a0299fb077c1ba98 . +_:Nd4b47d4885624e31ab7ede832237afeb . + . +_:N401bb3f0ba1b4f84b7db752de9c9ecda . +_:N95a2e8e0514048c496ba86d6678afb52 _:Na5ef2f7d581a4fbeab399f28f36514fc . + . +_:N1f2ca5a087da4ddc9e0f1c3623d854cb _:N5cdabdb752694f1c9a65db2083a57b66 . +_:N749163c9109e4fdaadb44dbb77f4bed4 . + "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . +_:N31d552db951b47269f52c41b41761d5d . + . +_:N5d88af867062488cb6e9d9d48ff41920 . + . +_:Ne63e0f50816b4addb79d58c16a81bee3 . +_:N13b712ac882f4d5ca50bb0fd516bd04d _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + . +_:N4740a545730245d7b9106bd4ffc8582c _:N29537a8625514225965436aae0e64d9f . +_:N96aafef3616e46f882877b2a7e11b757 . + . +_:Nb79e78a0d55242f68b3169bb1d0ec6bc "1"^^ . + . + _:N92b9f222f5b94268a55c169346f957f1 . + . + _:N7ea991bcafe746f8ae7f965a4039cbc4 . + . +_:Nce1c9f7707b749df9c04405465f5d693 . + . + . + "model" . + "expandedLicensing" . + . + . + . +_:N97f27abc23b9427f8445614385fdd5e7 "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . +_:N2d5629b576a240eca4cbdd951a693dd9 "1"^^ . +_:N51a6abe36bbb4a9a8cce23555b0fa72a _:Nc12aef8332fd4b9484195f299f484175 . +_:N5c7bcd96bfe24354b9199d05991a1c3c . + . + . + . + . + . + "Specifies the SPDX License List version in which this ListedLicense or\nListedLicenseException identifier was first added."@en . + "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . +_:N25996c4894e1460a8b698f0cbef34195 . + "A reference to a dynamic analysis report for a package."@en . + "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + _:Ned0fe992065d49dd890483be50cffa45 . +_:Ne30781691aca482680ffd9bbd2045c91 _:N1bc2f7dd56904c86b46e121aeb8cb636 . + . + _:N5c2be488612c4f73abb9b7b35b5a2e13 . +_:Nc4c2447375154c088326785e5201d90c . +_:N8aca67d5adb046a18a3855733ab12c9b "1"^^ . + . + "When a CVSS score is between 4.0 - 6.9"@en . + . + "Specifies the amount of energy consumed when training the AI model that is\nbeing used in the AI system."@en . +_:Na063ca2df3034db0bf1b8b898aa3a404 . + "configuration" . +_:N341f19d094bb4183a2db06364073f914 _:N2c94076e809942598a2c483d17eddfc7 . +_:Ne452fc8d239747848f49c2ac0d8e39d8 . + "secureSoftwareAttestation" . +_:N749163c9109e4fdaadb44dbb77f4bed4 . +_:Nf208bbcafacb4617ad8ce48ed0c5320a . +_:N4e8eb71dd7554ffe97d6bf2fb08a5437 . + . + . + "swid" . + . + . + "hasDocumentation" . + . + . + "install" . + . +_:N0265fd9255b84ae094abb5c54616ae2b . +_:N1dede72d56c347b085cf801844a9768c . + "Captures a limitation of the AI software."@en . +_:N8d94ac10bc5f422ca55e9aa451328fd1 . + "any hashing algorithm that does not exist in this list of entries"@en . diff --git a/v3.0/rdf/spdx-model.pretty-xml b/v3.0/rdf/spdx-model.pretty-xml new file mode 100644 index 0000000000..d552419df3 --- /dev/null +++ b/v3.0/rdf/spdx-model.pretty-xml @@ -0,0 +1,4347 @@ + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + + A license that is listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + + 1 + + + + + + + + 1 + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + + + 1 + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + 1 + 1 + + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + An individual human being. + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + + + 2 + + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + 1 + 1 + + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + + + + + + + + + 1 + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Describes a certain part of a file. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + A license that is not listed on the SPDX License List. + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + Specifies a vulnerability and its associated information. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + + + 1 + 1 + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + 2 + + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + 1 + 1 + + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + + + + + + + + + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + 1 + 1 + + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + A software agent. + + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + An Organization representing the SPDX Project. + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + Represents the energy quantity. + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + Identify the version of a package. + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + + + + + + + + + + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + 1 + + + + + + A property name with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + Captures the size of the dataset. + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + Provides the location for more information regarding an external identifier. + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + license + A reference to additional license information related to an artifact. + + + + none + When a CVSS score is 0.0 + + + + socialMedia + A reference to a social media channel for a package. + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + 1 + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + requirement + The Element provides a requirement needed as input for another Element. + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + other + any hashing algorithm that does not exist in this list of entries + + + Provides additional purpose information of the software artifact. + + + + Records the type of the model used in the AI software. + + + + Provides a detailed description of the Element. + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + Specifies the time an artifact was built. + + + + Defines the original host file that the snippet information applies to. + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + Describes how the dataset was collected. + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + Describes a relationship between one or more elements. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + A value used in a generic key-value pair. + + + + + documentation + A reference to the documentation for a package. + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + Specifies an Extension characterization of some aspect of an Element. + + + + Enumeration of dataset types. + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + 1 + 1 + + + + + + + + + + + + + 1 + 1 + + + + + + support + A reference to the software support channel or other support information for a package. + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + Specifies the SSVC decision type. + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + A key used in a generic key-value pair. + + + + + platform + The Element represents a runtime environment. + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + contains + The `from` Element contains each `to` Element. + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + other + Used when the type does not match any of the other options. + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + A group of people who work together in an organized way for a shared purpose. + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + software + the element follows the Software profile specification + + + + buildMeta + A reference build metadata related to a published package. + + + Identifies the full text of a License, in SPDX templating format. + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + Identifies the full text of a License or Addition. + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + generates + The `from` Element generates each `to` Element. + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + image + data is a collection of images such as pictures of animals. + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + + + + + + + + 1 + 1 + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + Specifies the type of an external reference. + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + vcs + A reference to a version control system related to a software artifact. + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + Information about the relationship between two Elements. + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + A string in the license expression format. + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + funding + A reference to funding information related to a package. + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + Capture the scope of information about a specific relationship between elements. + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + noAssertion + data type is not known. + + + + Refers to any object that stores content on a computer. + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + + + + + 1 + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + Specifies a time when a vulnerability assessment was modified + + + + Describes methods that can be used to explain the results from the AI model. + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + Provides information about the content type of an Element or a Property. + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + A key with an associated value. + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + issueTracker + A reference to the issue tracker for a package. + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + securityOther + A reference to related security information of unspecified type. + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + Specifies the version of a VEX statement. + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + Identifies from where or whom the Element originally came. + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + firmware + The Element provides low level control over a device's hardware. + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + Identifies the tooling that was used during the creation of the Element. + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + + + 1 + + + + + + buildSystem + A reference build system used to create or publish the package. + + + A License participating in a 'with addition' model. + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + A value used in a CdxPropertyEntry name-value pair. + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + Specifies the value of the content identifier. + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + 1 + 1 + + + + + + + + + + + + + + + 1 + + + + + + + + 1 + + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Enumeration of the valid profiles. + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + extension + the element follows the Extension profile specification + + + + altDownloadLocation + A reference to an alternative download location. + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + Specifies the safety risk level. + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + Provides an indication of where to retrieve an external Element. + + + + Identifies when the Element was originally created. + + + + + complete + The relationship is known to be exhaustive. + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + Describes if any sensitive personal information is present in the dataset. + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + Provides information about the creation of the Element. + + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + + 1 + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + + + + + 1 + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + Availability of dataset. + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + Records the measurement of prediction quality of the AI model. + + + + Specifies the time when a vulnerability was published. + + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + Describes a mechanism to update the dataset. + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + 1 + + + + + + + + 1 + + + + + A License participating in an 'or later' model. + + + + + application + The Element is a software application. + + + + review + Used when someone reviews the Element. + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + file + The file represents a single file (default). + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + library + The Element is a software library. + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + security + the element follows the Security profile specification + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + Provides an ExternalMap of Element identifiers. + + + + Specifies the exploit catalog type. + + + + + high + The second-highest level of risk posed by an AI system. + + + + data + The Element is data. + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + Specifies the exploit catalog type. + + + Provides information about the primary purpose of an Element. + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + module + The Element is a module of a piece of software. + + + + core + the element follows the Core profile specification + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + other + Other exploit catalogs + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + noAssertion + Makes no assertion about the field. + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + A license expression participating in a license set. + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + documentation + The Element is documentation. + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + A tuple of two positive integers that define a range. + + + + + + + 1 + 1 + + + + + + + + 1 + 1 + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + Property that describes the time at which a build stops. + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + Provides the location of an exploit catalog. + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + Uniquely identifies an external element. + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + References the Element on the left-hand side of a relationship. + + + + Property describing the session in which a build is invoked. + + + + Records the biases that the dataset is known to encompass. + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + Specifies the time an artifact was released. + + + + Property describing a parameter used in an instance of a build. + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + serious + The highest level of risk posed by an AI system. + + + + configuration + The Element is configuration data. + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + releaseNotes + A reference to the release notes for a package. + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + build + the element follows the Build profile specification + + + + other + The Element doesn't fit into any of the other categories. + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + manifest + The Element is a software manifest. + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + clear + Dataset may be distributed freely, without restriction. + + + + design + A relationship has specific context implications during an element's design. + + + Specifies the CVSS vector string for a vulnerability. + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + altWebPage + A reference to an alternative web page. + + + An entity that is authorized to issue identification credentials. + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + riskAssessment + A reference to a risk assessment for a package. + + + Categories of confidentiality level. + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + Defines the beginning of a range. + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + purchaseOrder + A reference to a purchase order for a package. + + + Specifies the type of the external identifier. + + + + + other + Any other units of energy measurement. + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + Timestamp of impact statement. + + + + Conveys information about how VEX status was determined. + + + + Specifies the algorithm used for calculating the hash value. + + + + An Element an annotator has made an assertion about. + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + install + The Element is used to install software on disk. + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + green + Dataset can be shared within a community of peers and partners. + + + + lite + the element follows the Lite profile specification + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + Specifies the time from which an element is applicable / valid. + + + + A substitute for a URI. + + + + Captures a limitation of the AI software. + + + + The name of a relevant standard that may apply to an artifact. + + + + Provides a map of a property names to a values. + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + framework + The Element is a software framework. + + + + dataset + the element follows the Dataset profile specification + + + Commentary on an assertion that an annotator has made. + + + + + yes + Indicates presence of the field. + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + Provides relevant information about the AI software, not including the model +description. + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + operatingSystem + The Element is an operating system. + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + 1 + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + other + Used when the type does not match any of the other options. + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + Describes the type of annotation. + + + + + container + The Element is a container image which can be used by a container runtime application. + + + Information about the relationship between two Elements. + + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + Property that describes the URI of the build configuration source file. + + + + + kilowattHour + Kilowatt-hour. + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + The field describes the availability of a dataset. + + + + Identifies who or what created the Element. + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + Categories of presence or absence. + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + Specifies the type of the content identifier. + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + Specifies the unit of energy consumption. + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + other + data is of a type not included in this list. + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + bom + The Element is a bill of materials. + + + + source + The Element is a single or a collection of source files. + + + + low + Low/no risk is posed by an AI system. + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + Specifies the type of an annotation. + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Specifies the unit in which energy is measured. + + + + Describes potentially noisy elements of the dataset. + + + + Provides information about the completeness of relationships. + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + no + Indicates absence of the field. + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + development + A relationship has specific context implications during development phase of an element. + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + Provides information about the creation of the Element. + + + + Defines the end of a range. + + + + + megajoule + Megajoule. + + + Describes a sensor used for collecting the data. + + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + Specifies the type of an external identifier. + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + Property describing the start time of a build. + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + Specifies the type of the external reference. + + + + Identifies the name of an Element as designated by the creator. + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + A LicenseAddition participating in a 'with addition' model. + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + Describes what the given dataset should be used for. + + + + Describes relevant information about different steps of the training process. + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + diff --git a/v3.0/rdf/spdx-model.trig b/v3.0/rdf/spdx-model.trig new file mode 100644 index 0000000000..27213c3015 --- /dev/null +++ b/v3.0/rdf/spdx-model.trig @@ -0,0 +1,4585 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +_:N930771319e4947cda366b2eeb7a19be9 { + ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N10776ad90ad94042bfd598e68f215ed9, + _:N2523b388c8904f2885050ee00d15f281, + _:N25996c4894e1460a8b698f0cbef34195, + _:N2a5d53abe06a466584993d22f4218cac, + _:N33bcc4b85bee4aa5a17cdd2efbef8922, + _:N39208ce6d6704289bce5a33c713589ba, + _:N49b44a8f36b14012934dd458769db5b1, + _:N5b173aa6ae6e4f6fbdb84567ce0dd388, + _:N61923a50c86b4ba0b8957d6b10968ce2, + _:N96aafef3616e46f882877b2a7e11b757, + _:N9b28133398a64d5eb219290008f464a6, + _:Nb0a6e8b29d9644ebad6cd2f67f423b47, + _:Nb79e78a0d55242f68b3169bb1d0ec6bc, + _:Nc36cca07a48048b18bee65bd265e3473, + _:Ncaa9a447e341490894b8ea06dc485a0c . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N19caf49b458948aab96db18d18a37807, + _:N56bea2883781491d89c9330a875e5e7d, + _:N749163c9109e4fdaadb44dbb77f4bed4, + _:N93bfbd075cd04cd190f57aa7a8d728c1, + _:N95c3ead21e6e4ecd95af23263451b25e, + _:Ncd772398fef24acfb9c377355aaa70e4, + _:Nce1c9f7707b749df9c04405465f5d693, + _:Neff504856bd94814a0299fb077c1ba98, + _:Nfe008f6511404b5b9d251ae6f0e14f51 . + + ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N401bb3f0ba1b4f84b7db752de9c9ecda, + _:Na183d066b46d4b6e86d08b078d501e3d, + _:Nd4b47d4885624e31ab7ede832237afeb, + _:Ned0fe992065d49dd890483be50cffa45 . + + ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N7fc15c5a65f84366ada3c30ddb250517 . + + ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + + ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + + ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N0265fd9255b84ae094abb5c54616ae2b, + _:Ndc9ca13ca7e045a890f1b0f580371051, + _:Nfea77563e3c34609b220695df9edc63c . + + ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N8919fac9e03440b19957656e4c6d5f47, + _:Nacf93e2dadec4cf5a6eddab055d67599, + _:Ndf280172f0834544a7759efee893b7d1 . + + ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + + ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property _:N1dede72d56c347b085cf801844a9768c, + _:N476942db27384f75af2da9e29db94014, + _:N4a0643790ee647d0bf9d75f3f4f80581, + _:N5234c2f9e59a42d9867dd1846c82c769, + _:N56df7be59075471b9d1466398865afdd, + _:N583a7c7011cd4f8383fc2b8c5f308588, + _:N5a72932413d2413b80569a5fb2966e41, + _:N6bf989b95c5e498e988052131700d5e6, + _:Na69fc7a1c2654979ada4d85b1717874b, + _:Nd8b38be0c57d489a82194c062bbe0b40, + _:Nd9b0e8688faa4db8bc021fe50af253fe, + _:Nef779dc58efd41708d2dd810a1c22861, + _:Nf208bbcafacb4617ad8ce48ed0c5320a . + + ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:Nc21c14ad1d3a4e3ea9fc14563d646d8d . + + ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + + ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + + ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6841333db1c2440083b2a1e012968a62 . + + ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property _:N7136c79627a74cbabf5f99227a8c06d3, + _:Nbeb8b7d55cf74321942fb0ae3da5add9 . + + ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property _:N453867a1e4d041d0b9ef358011ed5898, + _:Ne3e78235566445608978be9329e74cc2 . + + ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + + ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + + ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N1e10b72106c748bf8326627b02c07313 . + + ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N6999f1ba66054cb9a6683482a6046870, + _:Nd5b0cc3893294e8b9a546e75d437ff15 . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property _:Na2ab1463e071402b941a055cf25405d0 . + + ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3d0253c9ab6d43bd870cafd49a1aa17e, + _:Na242505ccf884ef29a794e57c9d3ddc8 . + + ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N4d64fe8feb16494b9674f49e196cdb1d, + _:N92aedbc611024e52983c2e9da6fdb503, + _:N96c77573f7d244af98fbb31a9a921415 . + + ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:Nb9bb8e59941d436cb193d8d8ecd38cce, + _:Nd34755ea58bd4430b6e06edfe49d3836, + _:Nf9c56978821e4d65b3c9e6089e72244f . + + ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N331685f17119458e9f8d03e1032a587d, + _:N88fb6b952c0b4497afed840a2b36b7c3 . + + ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N606fa8b8d1d849bc90c0d4a759ca18c6, + _:N67676f11ca184c05a0d5f6249a4b14fa, + _:N92b9f222f5b94268a55c169346f957f1 . + + ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3150b51898a54a30b8c523d53721610a . + + ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N5d88af867062488cb6e9d9d48ff41920, + _:Nf679cce397cb41148e4dbc0de457788b . + + ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N33cee511d45243669ca60bd0a0f4a3a9, + _:N8535416071ef432187b8a91ab3a7e437, + _:Nb964a7ec32c84ad9a7e5068cf4f02822 . + + ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + + ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N1411c3ed7f0d479e9873248eb22f62f2, + _:N97f27abc23b9427f8445614385fdd5e7, + _:Nca3d4237e69846fa81bc53dc43b6029e . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property _:N33e17640748a455091e7f615156e4be0, + _:N7f4ceb4220154dcc8f61793dbc8c6852, + _:Na0207e8ebb3546d494a226941f26b82a . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N48a995c812d240c8991c7af527062228 . + + ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property _:N135abe5aa7184697abfa5b1134f74635 . + + ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N15f27dd5aa464b16b06fd5927807179d, + _:N26e5d106c3b9457fa387974ed45155a7, + _:Nc849cbed1d4d47158d3a8ce5af53fc2a . + + spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + + ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + + ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + + ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + + ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + + ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + + ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + + ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + + ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + + ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + + ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + + ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + + ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + + ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + + ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + + ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + + ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + + ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + + ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property _:N08f35fbea3f34a129863ad8e6b88a5a1 . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + + ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + + ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + + ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + + ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + + ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + + ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + + ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + + ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + + ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + + ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + + ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + + ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + + ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + + ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + + ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + + ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + + ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + + ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + + ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + + ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + + ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + + ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + + ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + + ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + + ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + + ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + + ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + + ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + + ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + + ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + + ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + + ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + + ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + + ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + + ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + + ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + + ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + + ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + + ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + + ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + + ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + + ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + + ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + + ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + + ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + + ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + + ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + + ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + + ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + + ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + + ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + + ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + + ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + + ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + + ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + + ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + + ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + + ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + + ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + + ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + + ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + + ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + + ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + + ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + + ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + + ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + + ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + + ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + + ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + + ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + + ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + + ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + + ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + + ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + + ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + + ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + + ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + + ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + + ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + + ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + + ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + + ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + + ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + + ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + + ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + + ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + + ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + + ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + + ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + + ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1904cd4ccd84473a8555c9f0885877ef, + _:N3d0909f693c34cacbd26067f25a3cd4c, + _:N6d2410ca374f432183cea69b81c161ec . + + ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N026b410848804fea9d8c504126844111, + _:N3da1b725121949138220323e55721af3, + _:N5bfd54b8c91b4551a09ef347685af79e, + _:N6d5b2261790642829d74aecc96d7e681, + _:Nc07374747c9448faae0e1e2622db1d7d . + + ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N3e856278a9cf4af2badbcdbf73f80ffa, + _:N6720587ff9a14662ba139a3cc04633d6, + _:Nb97582dc84eb41e1aea78c6e5c7640d5 . + + ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N24fab7059f894755bb21ef4ddc4d0f4f, + _:N8aeda8c772e348afb93afc3dc5457355, + _:Nb831ba68859845819894bc24124f2493, + _:Nba7479035af442ada086c0338c451097, + _:Ne0351ee38a2940df9a643908f3c04c78 . + + ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N20c73971e3d9412097f90918b0fbd9d0, + _:N642c1242529241e184296a5a0b57d7d5, + _:Na075cb0c74ec4575aa5a2c4301d28902, + _:Nbd4cabc421bb46b3977fcf236c7870ff . + + ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N056b619290c944b1b9efec2e986869b0, + _:N872f874bf6a643fb922cfeb84da33004, + _:N8a427ef4e2c34b2980a778d817ac3ca2, + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 . + + ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:Ndb4e54e4ff284342bf2f11f51d7f2567, + _:Ne452fc8d239747848f49c2ac0d8e39d8 . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N2bf58c59d4e345bd92c2c66da13d5577, + _:Nc68e4e19132d4f32946d541ef17aaf0f . + + ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N1fa9bc1c7b534e18a5a523e72f951ec4, + _:N22a009d8e6fd49afa8d991cf125d3386, + _:N4dc4509276114e519a1e36d2339cd154, + _:N9b073a51b7934d96882a3d7b2516e6ee, + _:Ndaae4f6aabcc43579b940eeb55b7fa09, + _:Nfaab51f8ebca452e84e1031a425be7d5 . + + ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + + ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + + ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + + ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + + ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + + ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + + ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + + ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + + ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + + ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N19ffa456cd9a4738ae5406b9443c8eb1, + _:N303a78ff780a48fdbcb374ff43820d99 . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + + ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + + ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + + ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + + ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property _:N9e907f1b2a0a4dbfa462bb2801f85a99, + _:Na6ee2b8d1d624e21ae8b60f60a68d84d . + + ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N645cfb9d3c334cc1a3175307175364c7, + _:Na4c9815bb1c74163aad85a1b13e04f13 . + + ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property _:N02637b6a678241cda6ec95b576156ac2, + _:N2cbc74620706496aa87fbc369f1b0b05, + _:N7512c361fa6640a2a2d5027dcca31ae1, + _:N90f6c4f3b60f4279b4188594f640b568, + _:Ndd62961c42b449c7999ac09e91c55bb2 . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + + ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + + ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + + ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + + ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property _:N0e6424a884214886a5182405c83ce0e5, + _:N2d5629b576a240eca4cbdd951a693dd9, + _:Nad16ba6a202e461689abc70b9fcea166, + _:Nbb4d130582c44c00bdc80ffc03d8dde6, + _:Nf0f59f499fc84e7cadb021d1e8ba60ce . + + ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + + ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N168ff94489204ce2b3d2bcc2e291d420, + _:N3aae1ae126af41909469c96ead6b6227, + _:N7ea991bcafe746f8ae7f965a4039cbc4, + _:N804dd6908e264d10be7ab47179d84223, + _:N83380edfda0143559b20b6f86b17c17a, + _:Nb757eb766bcf484dab7fcc8640520f26, + _:Nd507d892ccf546c68470c2ad1de481bc . + + ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N624418f1db494f7ebe03fa364190d21d, + _:Ndb15970ce7d34e878a0a7123dad52212 . + + ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + + ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property _:N01a7ef65b90c4cf2a2fd910705d3bb53, + _:N4c0f1c4516d84ccca992781aa73748b0, + _:N722b841e0cc144789cdd7e01a5a50ea9, + _:N8aca67d5adb046a18a3855733ab12c9b, + _:N9539a3aa8f2640ccbf5e3147b95d0acd, + _:N9ebeb1bc85e741fb8d52f00b17dd5edb, + _:Na1a58d858f5445009e4e9c1c79b01ee8, + _:Nefba3a71506d41cfabbc865580be12f7, + _:Nf71e260bcc9940d2b8cb0fdf962a1454 . + + ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property _:N00a4f89addf045d28864aa6380106e8c, + _:N11cc93477738430e89e745f56c83f147, + _:N24687f30f3e64312b787f409644f4343, + _:N5fdc75b020564411a5c638c9aa7169b1, + _:N9b30e49ee021458b83b41fb0202c4043, + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 . + + ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + + ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property _:N3989f3d5c22c4cd2b18614b38e4fd864, + _:Nd696d0bece9045cfa929993fc189dab6 . + + ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + + ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + + ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + + ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + + ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + + ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N308fb6485f7d4864923946d7ba83b984, + _:N5c2be488612c4f73abb9b7b35b5a2e13 . + + ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + + ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N6faa0ec40c2944cc96365e0200f91bc7 . + + ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + + ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + + ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + + ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + + ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec, + _:N30178f0a784c43079551a63b841da0ba, + _:N46ba8ef3fde1433dbe3bd4d23fa74fec, + _:N84fbf505fc5b4942809840c744afbc50, + _:N9af46730ac5e4549a37713d578ca2c0c . + + ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + + ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + + ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + + ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + + ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + + ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + ns1:AbstractClass a owl:Class . + + ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + + ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + + ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property _:N1183c95846404f8686047bb384b1fbb5, + _:Ne63e0f50816b4addb79d58c16a81bee3 . + + ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + + ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property _:N164dbad8168a495a98820f4a532bad8c, + _:N2ceaa2ca925c4e80b9d615666e91bb76, + _:N4daef40acaac487baa5fb20c0fd627ac, + _:N4e8eb71dd7554ffe97d6bf2fb08a5437, + _:N53d06bdaf9464b0fbd454088aee08786, + _:N617bdae809f549f9b84e4c71b02ccd33, + _:N6c6d7f192a574d27bdc34c9ab2cafe1f, + _:Na063ca2df3034db0bf1b8b898aa3a404, + _:Ncc31c01eeda0480ea00ea96b0f811739 . + + ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + + ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + + ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + + ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + + _:N0039cd20d11f4e1eb92b14040fe9d2ab rdf:first ; + rdf:rest _:N9512e8c2edb34dc7ad3bcac4ce63a430 . + + _:N00a4f89addf045d28864aa6380106e8c sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText . + + _:N012999398659462aa7d4d45cfea4cd49 rdf:first ; + rdf:rest _:Ne0e964c633594ba097b6a750a6ade092 . + + _:N01a7ef65b90c4cf2a2fd910705d3bb53 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N01b35060833a487b8f68dd5852fb7128 rdf:first ; + rdf:rest _:N8d9932eb554044d69adb3585d42ac4a4 . + + _:N0207d8bc435b4fcf933b378f5d74d81c rdf:first ; + rdf:rest _:Nfbb90564d62a49c99f3ad124bf572c0a . + + _:N02216a682b174628b5883d37733d43f4 rdf:first ; + rdf:rest _:N2ef089c77eb34b33a0632d3a68232d5b . + + _:N02429c72607846619a4d3bc4f9e9e971 rdf:first ; + rdf:rest _:N8a3126cc6d804604930d39f15a0a7954 . + + _:N02637b6a678241cda6ec95b576156ac2 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl . + + _:N0265fd9255b84ae094abb5c54616ae2b sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile . + + _:N026b410848804fea9d8c504126844111 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N0358c2cacfaf495e9338bfa0ec064165 rdf:first ; + rdf:rest () . + + _:N042b9bb4151c4219ae35ea4665b1cb85 rdf:first ; + rdf:rest _:N8242d57d83034d40a15ec0013cc69b62 . + + _:N04c0f4b0b7d94bb980f1ae6d828c54eb rdf:first ; + rdf:rest () . + + _:N0506962c2ba748529cc29fdcb1a61bce rdf:first ; + rdf:rest () . + + _:N0525f39f8ddf4826a2a11f9086af43f8 rdf:first ; + rdf:rest _:N5e38eb28cfa046dfa2ad5d2c441ae3db . + + _:N0530f2e80adb4606aeaa0ee0c0b381af rdf:first ; + rdf:rest _:N2b4511fa0df849dca000a39ac34c254a . + + _:N056b619290c944b1b9efec2e986869b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:N06c2ea1f5832433aa8d0e7612d230380 rdf:first ; + rdf:rest _:N92311b1b08cb437aaea5bc0c25bf4b50 . + + _:N0725b77584894b4c82b93fc68df0a45d rdf:first ; + rdf:rest _:Ncd5a93b6120a456e8dc0d3aa1b1a461c . + + _:N0786949c6ae949ca971b0870a39e5628 rdf:first ; + rdf:rest _:Nfc1ba2b198a0488b97e460730d5d8314 . + + _:N08c151d77c034260b733a9cd4fb2db47 rdf:first ; + rdf:rest _:N4106ddc0ab0a4a51b658689625cb4bcd . + + _:N08f35fbea3f34a129863ad8e6b88a5a1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context . + + _:N0912149adb0b4f64bf8c3c1266d60a4a rdf:first ; + rdf:rest _:N8fe0d08ca3d644c394e8af08a3875047 . + + _:N093bbb61d9594baa8b978ad303aad6af rdf:first ; + rdf:rest _:N4ad7470591274ec4b6e670f8a9eb7616 . + + _:N09d41b24e37944889b085f3a5dec27a2 rdf:first ; + rdf:rest _:N4740a545730245d7b9106bd4ffc8582c . + + _:N09f51f6b10be4948ac38d31ce896aced rdf:first ; + rdf:rest _:N670b02a39f7e43c18d8cabf4a086ae6d . + + _:N0a1213eddeb04e2eafef770905f9f1bd rdf:first ; + rdf:rest _:Na6e92abe54d446e79e8c88579ac830f2 . + + _:N0c71e5c699a04dd1aef8e9c6d59b9b25 rdf:first ; + rdf:rest _:N50272c7539ef4c818bf3bccae2d7a4e7 . + + _:N0d74c19737464f18adb7fb9e70490836 rdf:first ; + rdf:rest _:Nf5ff1d1055e34b2cb95f75f6c7657265 . + + _:N0dd20b85a99e41b2b7b8481f3a0553a4 rdf:first ; + rdf:rest _:N4a1fc3bf9bc949a0b13c835bdca0bddb . + + _:N0e2779bcf1bd430f8f30fa6286429aa8 rdf:first ; + rdf:rest () . + + _:N0e6424a884214886a5182405c83ce0e5 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc8cdfd8c3ff74b469faab892beaa7bd5 ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose . + + _:N0eee4677557545a6b9165efd2364e418 rdf:first ; + rdf:rest _:Nae4f8b47fa644be6b9a1efc5c4e5a57e . + + _:N10776ad90ad94042bfd598e68f215ed9 sh:class ns3:PresenceType ; + sh:in _:Na71e0164a5d7491f82b21b32a559f2a4 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType . + + _:N1183c95846404f8686047bb384b1fbb5 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key . + + _:N1192103857734e528f997dca990b3645 rdf:first ; + rdf:rest _:Nd72c256eb46a430db7454aad221ffc59 . + + _:N11cc93477738430e89e745f56c83f147 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso . + + _:N11d2469065ae40ba876541501b6ad701 rdf:first ; + rdf:rest _:N4e66507395a34b13854c4b51db14e6c1 . + + _:N12791c5f96074c62a3ed255af776b87b rdf:first ; + rdf:rest _:N01b35060833a487b8f68dd5852fb7128 . + + _:N1288fc1d432c42e3a6691ec85b15b7f5 rdf:first ; + rdf:rest _:N6ecbea142a87482db61924a78444a2e7 . + + _:N135abe5aa7184697abfa5b1134f74635 sh:class ns6:SbomType ; + sh:in _:N54383bc8be2a41518a2fb5a7b1171841 ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType . + + _:N13b712ac882f4d5ca50bb0fd516bd04d rdf:first ; + rdf:rest _:Nbdef0d6b9a2a427fb4b1814e3c775c93 . + + _:N1411c3ed7f0d479e9873248eb22f62f2 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N15f27dd5aa464b16b06fd5927807179d sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile . + + _:N164dbad8168a495a98820f4a532bad8c sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension . + + _:N168ff94489204ce2b3d2bcc2e291d420 sh:class ns3:SupportType ; + sh:in _:N993312a33ff8406aaa62fb12f728a245 ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel . + + _:N1732034f40cb4a83b62ae814a97635b1 rdf:first ; + rdf:rest _:N18770e9733c8452f9533b746b1378584 . + + _:N18770e9733c8452f9533b746b1378584 rdf:first ; + rdf:rest _:N750e6ba1e1744f44956807fd65a5a4f7 . + + _:N18ddc7ea6abf4cb8a96fd35f1adaa3ec sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:N1904cd4ccd84473a8555c9f0885877ef sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption . + + _:N1931b6c2fa1e43769bda7a922ee5d431 rdf:first ; + rdf:rest _:Ne0ead3de0c1842e8803711c778d3de8f . + + _:N19bf11d3eb754e10bd676b9b7780555e rdf:first ; + rdf:rest _:N3ae1b4b606c54455af1a19bb1a2bfbb1 . + + _:N19caf49b458948aab96db18d18a37807 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N19ffa456cd9a4738ae5406b9443c8eb1 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N1bc2f7dd56904c86b46e121aeb8cb636 rdf:first ; + rdf:rest _:Nd25a98977037415f94236e4881c554c0 . + + _:N1dafd5bc3b6040e490dfb6830c66802d rdf:first ; + rdf:rest _:Nc4c2447375154c088326785e5201d90c . + + _:N1dede72d56c347b085cf801844a9768c sh:class ns4:ConfidentialityLevelType ; + sh:in _:N1dafd5bc3b6040e490dfb6830c66802d ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel . + + _:N1e10b72106c748bf8326627b02c07313 sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense . + + _:N1e65c28f50ca472e8d766dd913f3ecc1 rdf:first ; + rdf:rest _:Ne3c684285049449e9ee58f318c943f4f . + + _:N1f1d4556eef644b9976392b54821e832 rdf:first ; + rdf:rest _:N4feeea92771943cf9cdc1cb0e5a19eb8 . + + _:N1f2ca5a087da4ddc9e0f1c3623d854cb rdf:first ; + rdf:rest _:N5cdabdb752694f1c9a65db2083a57b66 . + + _:N1fa9bc1c7b534e18a5a523e72f951ec4 sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to . + + _:N20c73971e3d9412097f90918b0fbd9d0 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint . + + _:N218b2297f9704d99bf1b9e818945ce5c rdf:first ; + rdf:rest _:Nd498732042494722ac01f812b9752e13 . + + _:N21bd6927f63f42d79efcc4dad7881e53 rdf:first ; + rdf:rest _:Na8d8ac54c0434708b78fe73a4d8e0660 . + + _:N22a009d8e6fd49afa8d991cf125d3386 sh:class ns3:RelationshipCompleteness ; + sh:in _:Na4c9bfc328f44f7a82b4bb6b0d500714 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness . + + _:N24390832561247ea9edbcfeca24f67aa rdf:first ; + rdf:rest _:N702ebaf549e846d0bb51a54e7a52860e . + + _:N24687f30f3e64312b787f409644f4343 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate . + + _:N24fab7059f894755bb21ef4ddc4d0f4f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N2523b388c8904f2885050ee00d15f281 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing . + + _:N25996c4894e1460a8b698f0cbef34195 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability . + + _:N26e5d106c3b9457fa387974ed45155a7 sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange . + + _:N28454dc7d61d47bd9f19e037f20819ed rdf:first ; + rdf:rest _:N4b172a1a115b4973a390eec846d3cadb . + + _:N29537a8625514225965436aae0e64d9f rdf:first ; + rdf:rest _:N6bb457a45b8149f09614fbba0dde597c . + + _:N2a5d53abe06a466584993d22f4218cac sh:class ns2:SafetyRiskAssessmentType ; + sh:in _:Nac7de1144825418b96a3c43ff6d678a6 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment . + + _:N2aad1aae2d3f47e8b136b6be47eab335 rdf:first ; + rdf:rest _:Ne2ff293b6d084635bd69a6ad308a4ea9 . + + _:N2ad096761e3044fcb326834ae006af13 rdf:first ; + rdf:rest _:Ne71793c1d96b4398876c3fddfc0f543d . + + _:N2b4511fa0df849dca000a39ac34c254a rdf:first ; + rdf:rest () . + + _:N2b5a3ed5442042b6b9ecf776b63ca010 rdf:first ; + rdf:rest _:N35f6a1c62bd343da8432836cbbbd8d0e . + + _:N2bf58c59d4e345bd92c2c66da13d5577 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix . + + _:N2c2208ee7e3d40ca97119f695308f1f3 rdf:first ; + rdf:rest _:N218b2297f9704d99bf1b9e818945ce5c . + + _:N2c94076e809942598a2c483d17eddfc7 rdf:first ; + rdf:rest () . + + _:N2caaec60ce124c8091e058eea48622ba rdf:first ; + rdf:rest _:N918ee014e9d04d56bb2c1642fd51a78f . + + _:N2cbc74620706496aa87fbc369f1b0b05 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage . + + _:N2ceaa2ca925c4e80b9d615666e91bb76 sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo . + + _:N2d5629b576a240eca4cbdd951a693dd9 sh:class ns6:SoftwarePurpose ; + sh:in _:Nc505579387424472888c03cc153dd107 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose . + + _:N2dc39d16ee9f4be191ad3506bae0c216 rdf:first ; + rdf:rest () . + + _:N2ef089c77eb34b33a0632d3a68232d5b rdf:first ; + rdf:rest _:N72025856b2c04aedb921459d28b8f3a5 . + + _:N2f0b2a4ea3614cf4a1d12c296f86812e rdf:first ; + rdf:rest _:N3b580065725749b7ab5e332a55260a05 . + + _:N2f9a893241114b04a570a074eb5e90fd rdf:first ; + rdf:rest _:Nf07f4220a2fd47bea00636caef099680 . + + _:N30178f0a784c43079551a63b841da0ba sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N303a78ff780a48fdbcb374ff43820d99 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N308fb6485f7d4864923946d7ba83b984 sh:class ns2:EnergyUnitType ; + sh:in _:N13b712ac882f4d5ca50bb0fd516bd04d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit . + + _:N3150b51898a54a30b8c523d53721610a sh:class ns5:SsvcDecisionType ; + sh:in _:Nbc8ad111179e4d28aeca12d049d01869 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType . + + _:N316e8b195aee413da3f8a16b55477afe rdf:first ; + rdf:rest _:Nfb33f9dd13074a5393c69c370e2cb4f3 . + + _:N31ca4e8daaef47e2b5fa1bf4eaafec63 rdf:first ; + rdf:rest _:N042b9bb4151c4219ae35ea4665b1cb85 . + + _:N31d552db951b47269f52c41b41761d5d rdf:first ; + rdf:rest _:N99c1538993cb4cc0a17aa9ebc04745e5 . + + _:N331685f17119458e9f8d03e1032a587d sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile . + + _:N33bcc4b85bee4aa5a17cdd2efbef8922 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining . + + _:N33cee511d45243669ca60bd0a0f4a3a9 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N33e17640748a455091e7f615156e4be0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:N341f19d094bb4183a2db06364073f914 rdf:first ; + rdf:rest _:N2c94076e809942598a2c483d17eddfc7 . + + _:N3484c741d91a4723b5c7f52d12122e53 rdf:first ; + rdf:rest _:N8dfde768ccad4b2b91f251f73ad6cf1b . + + _:N349791578bd441d7b8f76b4673275235 rdf:first ; + rdf:rest _:N0358c2cacfaf495e9338bfa0ec064165 . + + _:N353f7075a1fe48b3b7b7af086e4aa2ed rdf:first ; + rdf:rest _:N92fcf21ac8a64f358f68624b0432e712 . + + _:N35748216664842588d1d2428d0238f7c rdf:first ; + rdf:rest _:N012999398659462aa7d4d45cfea4cd49 . + + _:N35f6a1c62bd343da8432836cbbbd8d0e rdf:first ; + rdf:rest _:Nf016298471ac4dc394002a7ecea87e4a . + + _:N388a67e4decf423d92132d6f8ca8791d rdf:first ; + rdf:rest _:N0506962c2ba748529cc29fdcb1a61bce . + + _:N39208ce6d6704289bce5a33c713589ba sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel . + + _:N3989f3d5c22c4cd2b18614b38e4fd864 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes . + + _:N3a5f5817b005498690770268a7749990 rdf:first ; + rdf:rest _:N53e150822c694617a126e0d67cfe88d2 . + + _:N3aae1ae126af41909469c96ead6b6227 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N3ae1b4b606c54455af1a19bb1a2bfbb1 rdf:first ; + rdf:rest _:N8d94ac10bc5f422ca55e9aa451328fd1 . + + _:N3ae792b6cfbc44649f0ea01eb18a0fb3 rdf:first ; + rdf:rest _:N62cbeb231bc544a7ac8aab5e8217d804 . + + _:N3b580065725749b7ab5e332a55260a05 rdf:first ; + rdf:rest _:N0eee4677557545a6b9165efd2364e418 . + + _:N3c78df17f57a45d7b66ef27d1d0b60be rdf:first ; + rdf:rest _:N7c1afce8b8f14d94b7b00b67814f4a92 . + + _:N3d0253c9ab6d43bd870cafd49a1aa17e sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N3d0909f693c34cacbd26067f25a3cd4c sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption . + + _:N3d49f1697b79484bb086d05ff0857eec rdf:first ; + rdf:rest _:Nef0b82c6d2ef4a5c8dbd141212401b13 . + + _:N3da1b725121949138220323e55721af3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N3e5fc4328f364305a1c66fdd7534c881 rdf:first ; + rdf:rest _:Nda2c2ba3d01c418691e78e82ec5ab9d6 . + + _:N3e856278a9cf4af2badbcdbf73f80ffa sh:class ns3:ProfileIdentifierType ; + sh:in _:N473befceadbe42d0bd9069dd0ce4699b ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance . + + _:N3ecca35aacff49e881d71ec1ce7aeb60 rdf:first ; + rdf:rest _:N40360ba6386b4532be67e616fc8cd204 . + + _:N401bb3f0ba1b4f84b7db752de9c9ecda sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject . + + _:N402019128a2449e3b5be3f04ec1f62f4 rdf:first ; + rdf:rest _:N6e67e553547e4413a6ba103a34e16d88 . + + _:N40360ba6386b4532be67e616fc8cd204 rdf:first ; + rdf:rest _:N3c78df17f57a45d7b66ef27d1d0b60be . + + _:N4106ddc0ab0a4a51b658689625cb4bcd rdf:first ; + rdf:rest _:N3ecca35aacff49e881d71ec1ce7aeb60 . + + _:N41bfdb0844834a9296a04a2b771b30d7 rdf:first ; + rdf:rest () . + + _:N4252a866980f4a839fad017a197dc8af rdf:first ; + rdf:rest _:N0c71e5c699a04dd1aef8e9c6d59b9b25 . + + _:N42c7e772b0ff4d5d9a97a8c3334d8a58 rdf:first ; + rdf:rest _:N1931b6c2fa1e43769bda7a922ee5d431 . + + _:N43b644328d464248beda66a9dc1b24f0 rdf:first ; + rdf:rest () . + + _:N453867a1e4d041d0b9ef358011ed5898 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N4570847561a247b190684fe248fa523f rdf:first ; + rdf:rest _:N51cddf68303a476d955b87917202ff31 . + + _:N45733e14e2a1496b8dd8e675ad450ace rdf:first ; + rdf:rest _:Nbd3441f77ea64600b8f311e26c76a5cd . + + _:N45d29e6a8f964d629bcfd38e8a2812df rdf:first ; + rdf:rest _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 . + + _:N464f3e9fe6dc411b88a93fb1c9045967 rdf:first ; + rdf:rest _:N21bd6927f63f42d79efcc4dad7881e53 . + + _:N46ba8ef3fde1433dbe3bd4d23fa74fec sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N473befceadbe42d0bd9069dd0ce4699b rdf:first ; + rdf:rest _:Nbfec1cd5e43649cba6485b1a01ec1b68 . + + _:N4740a545730245d7b9106bd4ffc8582c rdf:first ; + rdf:rest _:N29537a8625514225965436aae0e64d9f . + + _:N476942db27384f75af2da9e29db94014 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing . + + _:N47bf567d302048459f09bc6f9e280b5e rdf:first ; + rdf:rest _:Nbed0dcc3c778406db4d3f6eca8c4c177 . + + _:N48a995c812d240c8991c7af527062228 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N497a6b43b7584ce9a497817fce159210 rdf:first ; + rdf:rest _:N9a16803acd9b4de0a606f5c7ca338d46 . + + _:N49b44a8f36b14012934dd458769db5b1 sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption . + + _:N49ef6f7a94564ae0956279bb86096fa0 rdf:first ; + rdf:rest _:Neb7d9e3129e841ffba55cfcffa695a61 . + + _:N4a0643790ee647d0bf9d75f3f4f80581 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias . + + _:N4a1fc3bf9bc949a0b13c835bdca0bddb rdf:first ; + rdf:rest _:N746b944c68bf4bf39a5cdc3bf1afbba1 . + + _:N4a71e77d78634c69959e3e011db657c9 rdf:first ; + rdf:rest _:N897103c5db374d44a639af1692f596b0 . + + _:N4ad7470591274ec4b6e670f8a9eb7616 rdf:first ; + rdf:rest () . + + _:N4b172a1a115b4973a390eec846d3cadb rdf:first ; + rdf:rest _:N04c0f4b0b7d94bb980f1ae6d828c54eb . + + _:N4b9123c429a143928240efffd877c09e rdf:first ; + rdf:rest _:N5dc3284b65a24ff69bef8bb7c2950f40 . + + _:N4c0f1c4516d84ccca992781aa73748b0 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader . + + _:N4c52d9d036934841b17eac13b27a39f8 rdf:first ; + rdf:rest _:Nbc9ecbd1db234efabb062c64c5b1582e . + + _:N4d64fe8feb16494b9674f49e196cdb1d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:N4daef40acaac487baa5fb20c0fd627ac sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description . + + _:N4dc4509276114e519a1e36d2339cd154 sh:class ns3:RelationshipType ; + sh:in _:Ndba01dc226ee49c3be1b757c1787cb43 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType . + + _:N4e66507395a34b13854c4b51db14e6c1 rdf:first ; + rdf:rest _:N3e5fc4328f364305a1c66fdd7534c881 . + + _:N4e8eb71dd7554ffe97d6bf2fb08a5437 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:N4feeea92771943cf9cdc1cb0e5a19eb8 rdf:first ; + rdf:rest _:N1732034f40cb4a83b62ae814a97635b1 . + + _:N50272c7539ef4c818bf3bccae2d7a4e7 rdf:first ; + rdf:rest _:N2caaec60ce124c8091e058eea48622ba . + + _:N51a6abe36bbb4a9a8cce23555b0fa72a rdf:first ; + rdf:rest _:Nc12aef8332fd4b9484195f299f484175 . + + _:N51cddf68303a476d955b87917202ff31 rdf:first ; + rdf:rest () . + + _:N5234c2f9e59a42d9867dd1846c82c769 sh:class ns4:DatasetType ; + sh:in _:Nb29082bbf3a54faf833061815ecea3cd ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType . + + _:N53d06bdaf9464b0fbd454088aee08786 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N53e150822c694617a126e0d67cfe88d2 rdf:first ; + rdf:rest _:Nbe7b313a45b948c6a406f37ccd2c5ee6 . + + _:N54383bc8be2a41518a2fb5a7b1171841 rdf:first ; + rdf:rest _:N559cf862cf484b388a29cbb3e04d2539 . + + _:N5484226f71e247459aecae3701f31924 rdf:first ; + rdf:rest _:N31ca4e8daaef47e2b5fa1bf4eaafec63 . + + _:N54a4d666657c40289b7665b9f8fa4d2c rdf:first ; + rdf:rest _:N3ae792b6cfbc44649f0ea01eb18a0fb3 . + + _:N5546070c54224ce482c3cbd8b3c5d898 rdf:first ; + rdf:rest _:Na5a947182f8f431690f104df52b37ae4 . + + _:N559cf862cf484b388a29cbb3e04d2539 rdf:first ; + rdf:rest _:Nf9e398de7c23460c95e7fec63c92065d . + + _:N56bea2883781491d89c9330a875e5e7d sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N56df7be59075471b9d1466398865afdd sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed . + + _:N575a40dcf9d2470382a3cb67027db887 rdf:first ; + rdf:rest _:N600baa7cc72e418cac29838b2bb675b8 . + + _:N575fe651e76242bf8d3db482154b8fae rdf:first ; + rdf:rest () . + + _:N583a7c7011cd4f8383fc2b8c5f308588 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor . + + _:N5a72932413d2413b80569a5fb2966e41 sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize . + + _:N5aebbc4f9aa74a9ca8a930203a1284f2 rdf:first ; + rdf:rest _:Nf0f8e43d5c7b417bb04959276983ea1c . + + _:N5b173aa6ae6e4f6fbdb84567ce0dd388 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold . + + _:N5bfd54b8c91b4551a09ef347685af79e sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing . + + _:N5c2be488612c4f73abb9b7b35b5a2e13 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity . + + _:N5c52044e0e91489480dcbc1b1bb7e350 rdf:first ; + rdf:rest _:N9919f57d67bd4992ac37a637007f56b9 . + + _:N5c7bcd96bfe24354b9199d05991a1c3c rdf:first ; + rdf:rest _:Nbd73767485264c33bc64cc9b42c99b88 . + + _:N5cdabdb752694f1c9a65db2083a57b66 rdf:first ; + rdf:rest _:N6383d37e157d4dffb5f82a27d885c7b8 . + + _:N5d7b7ab80ba94da78154e51e39f4b55d rdf:first ; + rdf:rest _:N95a2e8e0514048c496ba86d6678afb52 . + + _:N5d88af867062488cb6e9d9d48ff41920 sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N5db3bc3ac4ca4493a796356af601403e rdf:first ; + rdf:rest _:N0039cd20d11f4e1eb92b14040fe9d2ab . + + _:N5dc3284b65a24ff69bef8bb7c2950f40 rdf:first ; + rdf:rest _:N2aad1aae2d3f47e8b136b6be47eab335 . + + _:N5dc7ad7b328945158bb2c61ac16e194c rdf:first ; + rdf:rest _:N0912149adb0b4f64bf8c3c1266d60a4a . + + _:N5e38eb28cfa046dfa2ad5d2c441ae3db rdf:first ; + rdf:rest _:Nf91d5c31a6274b259ae9d3da7de37c4d . + + _:N5f88e1becb864ed4b48bf6a4398f3638 rdf:first ; + rdf:rest () . + + _:N5f901838dbd947f0aef2c3a4486db889 rdf:first ; + rdf:rest _:N2f0b2a4ea3614cf4a1d12c296f86812e . + + _:N5facf933623c4898a775e670cb057eef rdf:first ; + rdf:rest _:N3d49f1697b79484bb086d05ff0857eec . + + _:N5fdc75b020564411a5c638c9aa7169b1 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId . + + _:N5ff41cce72fe443c82fe25e80c38d155 rdf:first ; + rdf:rest _:Nb30a287d827e4316be15597c73c84fef . + + _:N600baa7cc72e418cac29838b2bb675b8 rdf:first ; + rdf:rest _:Ne4b5d8545c4c40c394f6fcfbf82ac649 . + + _:N604da09912b74a828b98bb6b28fbf0a7 rdf:first ; + rdf:rest _:N0530f2e80adb4606aeaa0ee0c0b381af . + + _:N606fa8b8d1d849bc90c0d4a759ca18c6 sh:class ns5:ExploitCatalogType ; + sh:in _:Nc68de2290dec4037b97bb40ca8c0adb1 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType . + + _:N60b7e732109b4d57a2174a1793e81730 rdf:first ; + rdf:rest _:Nb8f515d8797c45b7894e3e707f5223fd . + + _:N617bdae809f549f9b84e4c71b02ccd33 sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier . + + _:N61923a50c86b4ba0b8957d6b10968ce2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication . + + _:N624418f1db494f7ebe03fa364190d21d sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange . + + _:N62cbeb231bc544a7ac8aab5e8217d804 rdf:first ; + rdf:rest _:N6e64ceb369f04614bd3449d6d9bea0d1 . + + _:N6383d37e157d4dffb5f82a27d885c7b8 rdf:first ; + rdf:rest _:N388a67e4decf423d92132d6f8ca8791d . + + _:N642c1242529241e184296a5a0b57d7d5 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId . + + _:N6455bf8bc0534e40a8203b71244036bd rdf:first ; + rdf:rest _:N2ad096761e3044fcb326834ae006af13 . + + _:N645cfb9d3c334cc1a3175307175364c7 sh:class ns6:FileKindType ; + sh:in _:N316e8b195aee413da3f8a16b55477afe ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind . + + _:N6484abf63505400facffdf4a86936716 rdf:first ; + rdf:rest _:N832cd397b3524a16ae0417e09ab5b40e . + + _:N64aa778e8d414bb58cc29d8a040aa5b5 rdf:first ; + rdf:rest _:N49ef6f7a94564ae0956279bb86096fa0 . + + _:N670b02a39f7e43c18d8cabf4a086ae6d rdf:first ; + rdf:rest _:N4a71e77d78634c69959e3e011db657c9 . + + _:N6720587ff9a14662ba139a3cc04633d6 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement . + + _:N67676f11ca184c05a0d5f6249a4b14fa sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited . + + _:N681b535a77a04528a517054508bb1c40 rdf:first ; + rdf:rest _:N4252a866980f4a839fad017a197dc8af . + + _:N6841333db1c2440083b2a1e012968a62 sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:N6999f1ba66054cb9a6683482a6046870 sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition . + + _:N69cc60cd211d4ac69d884813fa143fc7 rdf:first ; + rdf:rest _:N0dd20b85a99e41b2b7b8481f3a0553a4 . + + _:N69eefd6c115c4499be60a56a329082ed rdf:first ; + rdf:rest () . + + _:N6a47af8674814d9a92314ce9c053556a rdf:first ; + rdf:rest _:N0d74c19737464f18adb7fb9e70490836 . + + _:N6bb457a45b8149f09614fbba0dde597c rdf:first ; + rdf:rest _:N5dc7ad7b328945158bb2c61ac16e194c . + + _:N6bf989b95c5e498e988052131700d5e6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse . + + _:N6c6d7f192a574d27bdc34c9ab2cafe1f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary . + + _:N6ca95996c3ba43bdbff56b6d5b9fdab9 rdf:first ; + rdf:rest _:N09f51f6b10be4948ac38d31ce896aced . + + _:N6cb4c4347f154af1b5c9d61bdb1d6485 rdf:first ; + rdf:rest _:Ne36b98993a6a41abaca571a82d61050c . + + _:N6d2410ca374f432183cea69b81c161ec sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption . + + _:N6d5b2261790642829d74aecc96d7e681 sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy . + + _:N6e64ceb369f04614bd3449d6d9bea0d1 rdf:first ; + rdf:rest _:Ne16b834cedfa4b8db4d362a45561064d . + + _:N6e67e553547e4413a6ba103a34e16d88 rdf:first ; + rdf:rest _:N4b9123c429a143928240efffd877c09e . + + _:N6ecbea142a87482db61924a78444a2e7 rdf:first ; + rdf:rest _:Nd72eee1dacf14634b4ccb3f926804521 . + + _:N6faa0ec40c2944cc96365e0200f91bc7 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N702ebaf549e846d0bb51a54e7a52860e rdf:first ; + rdf:rest _:Nb076c63c99944bff81f8ce7e21fbf841 . + + _:N7135267418f04789a477e78eef34865e rdf:first ; + rdf:rest _:N54a4d666657c40289b7665b9f8fa4d2c . + + _:N7136c79627a74cbabf5f99227a8c06d3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded . + + _:N72025856b2c04aedb921459d28b8f3a5 rdf:first ; + rdf:rest _:Nf5c2326720d14f579097f3ab47e8c762 . + + _:N722b841e0cc144789cdd7e01a5a50ea9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N7265cf39508f4d7d8064b01c6fc7af91 rdf:first ; + rdf:rest _:N9ef78d5edabf4efbb280aa669f60517d . + + _:N7381b5af92324165b38a2ef399a3d683 rdf:first ; + rdf:rest _:Nd6fa5fcf79af41aca71f798a61820519 . + + _:N746b944c68bf4bf39a5cdc3bf1afbba1 rdf:first ; + rdf:rest _:Nb5d70b9706cb46a29801cbcb49dffef6 . + + _:N749163c9109e4fdaadb44dbb77f4bed4 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N750e6ba1e1744f44956807fd65a5a4f7 rdf:first ; + rdf:rest _:Ne09d8237f43b483293ea5b23d9d378c9 . + + _:N7512c361fa6640a2a2d5027dcca31ae1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation . + + _:N7634a4c745c849d5b147ccbf41ef2bcb rdf:first ; + rdf:rest _:N69cc60cd211d4ac69d884813fa143fc7 . + + _:N765d53a52f60469db1405497bbdeb524 rdf:first ; + rdf:rest _:N45733e14e2a1496b8dd8e675ad450ace . + + _:N795110769b4a40288bd376f538317c4c rdf:first ; + rdf:rest _:N1288fc1d432c42e3a6691ec85b15b7f5 . + + _:N7b217a3de6634154b32708f11e4a7f89 rdf:first ; + rdf:rest _:Nc0cbe94b1b9f4c518494e91bc175e759 . + + _:N7c00958b8c7c491d82e976dea47764ee rdf:first ; + rdf:rest _:N5ff41cce72fe443c82fe25e80c38d155 . + + _:N7c08903e22d24c6f9559062e74c8c807 rdf:first ; + rdf:rest _:Nfec76341615042fa920d080bb121bd66 . + + _:N7c1afce8b8f14d94b7b00b67814f4a92 rdf:first ; + rdf:rest _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 . + + _:N7c577594e1734b4ebabc9b18761d5162 rdf:first ; + rdf:rest _:N99de8e9db44844b5a9d11b197386f3d0 . + + _:N7ce5215fd77b4391bb0faf9a289c9651 rdf:first ; + rdf:rest _:Nf34b3b1798cd4b95ad7460d818440421 . + + _:N7d38e5ecd3ab4556b895637c8beeb598 rdf:first ; + rdf:rest _:N5facf933623c4898a775e670cb057eef . + + _:N7ea991bcafe746f8ae7f965a4039cbc4 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName . + + _:N7f32ec55b71f438fa081e1ea71e23e12 rdf:first ; + rdf:rest _:N2b5a3ed5442042b6b9ecf776b63ca010 . + + _:N7f4ceb4220154dcc8f61793dbc8c6852 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N7fc15c5a65f84366ada3c30ddb250517 sh:class ns3:LifecycleScopeType ; + sh:in _:Naf98619f104747d192028a17f0ecd8bb ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope . + + _:N804dd6908e264d10be7ab47179d84223 sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy . + + _:N81a6a212754843d3aba0e84f43791e7f rdf:first ; + rdf:rest () . + + _:N81e9711becff48eaa08e25e5b6fea9c9 rdf:first ; + rdf:rest () . + + _:N8242d57d83034d40a15ec0013cc69b62 rdf:first ; + rdf:rest _:N2c2208ee7e3d40ca97119f695308f1f3 . + + _:N82d87d74437f447f8c64422e7639002d rdf:first ; + rdf:rest _:N8b832a0c38964c63b34ddf5c0285dbe7 . + + _:N832cd397b3524a16ae0417e09ab5b40e rdf:first ; + rdf:rest _:N1f2ca5a087da4ddc9e0f1c3623d854cb . + + _:N83380edfda0143559b20b6f86b17c17a sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N844378f645c04baba1e77ba4c91a005c rdf:first ; + rdf:rest _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 . + + _:N84fbf505fc5b4942809840c744afbc50 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement . + + _:N8535416071ef432187b8a91ab3a7e437 sh:class ns5:VexJustificationType ; + sh:in _:N0525f39f8ddf4826a2a11f9086af43f8 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType . + + _:N872f874bf6a643fb922cfeb84da33004 sh:class ns3:ExternalRefType ; + sh:in _:N681b535a77a04528a517054508bb1c40 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType . + + _:N8737dc2b1bd6408b852d2324c6ce404e rdf:first ; + rdf:rest _:N575fe651e76242bf8d3db482154b8fae . + + _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 rdf:first ; + rdf:rest _:Neba2498dd09a4417a0ad37b9ab3e5e69 . + + _:N88d076d5560e44378fc63f2196d3e9be rdf:first ; + rdf:rest _:N7c08903e22d24c6f9559062e74c8c807 . + + _:N88fb6b952c0b4497afed840a2b36b7c3 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability . + + _:N8919fac9e03440b19957656e4c6d5f47 sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense . + + _:N897103c5db374d44a639af1692f596b0 rdf:first ; + rdf:rest _:Nc1f593d31b694f8d899bab4cfafbc332 . + + _:N89b556da50e44c328fa4742ba07ad842 rdf:first ; + rdf:rest _:Ndc1cec228c454b62a5ab7eee0eab8995 . + + _:N8a3126cc6d804604930d39f15a0a7954 rdf:first ; + rdf:rest _:Ne1807e7da3dc42d8921080afa2df652f . + + _:N8a427ef4e2c34b2980a778d817ac3ca2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment . + + _:N8aca67d5adb046a18a3855733ab12c9b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate . + + _:N8aeda8c772e348afb93afc3dc5457355 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator . + + _:N8b832a0c38964c63b34ddf5c0285dbe7 rdf:first ; + rdf:rest _:N7b217a3de6634154b32708f11e4a7f89 . + + _:N8c4178586ccf4f6aac7bc77998ce8216 rdf:first ; + rdf:rest _:Nbc8699aa0f544965affe9ba57e69fa78 . + + _:N8d94ac10bc5f422ca55e9aa451328fd1 rdf:first ; + rdf:rest _:N11d2469065ae40ba876541501b6ad701 . + + _:N8d9932eb554044d69adb3585d42ac4a4 rdf:first ; + rdf:rest _:N6455bf8bc0534e40a8203b71244036bd . + + _:N8dfde768ccad4b2b91f251f73ad6cf1b rdf:first ; + rdf:rest _:N0a1213eddeb04e2eafef770905f9f1bd . + + _:N8e015961b7e9410e98c4287ad1a58ebb rdf:first ; + rdf:rest _:Nfc42797a854d4008a99f6062c2875fc3 . + + _:N8e9938cc2a3c4da9abce340cca712edd rdf:first ; + rdf:rest _:N1f1d4556eef644b9976392b54821e832 . + + _:N8fe0d08ca3d644c394e8af08a3875047 rdf:first ; + rdf:rest _:N5f901838dbd947f0aef2c3a4486db889 . + + _:N907869d713e3425588796c37fb9c49c1 rdf:first ; + rdf:rest _:Nb3d9d9553ea04f749108d2000dfc3953 . + + _:N90f6c4f3b60f4279b4188594f640b568 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo . + + _:N918ee014e9d04d56bb2c1642fd51a78f rdf:first ; + rdf:rest _:N0207d8bc435b4fcf933b378f5d74d81c . + + _:N91f490513b4b406b85ec22decdb5274a rdf:first ; + rdf:rest _:Nd685430b1a9c44d6abb820e3d22ad9fc . + + _:N92311b1b08cb437aaea5bc0c25bf4b50 rdf:first ; + rdf:rest _:N02429c72607846619a4d3bc4f9e9e971 . + + _:N92aedbc611024e52983c2e9da6fdb503 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:N92b9f222f5b94268a55c169346f957f1 sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator . + + _:N92fcf21ac8a64f358f68624b0432e712 rdf:first ; + rdf:rest () . + + _:N93517a28b24343c8a9247206129a9684 rdf:first ; + rdf:rest _:N5c52044e0e91489480dcbc1b1bb7e350 . + + _:N93bfbd075cd04cd190f57aa7a8d728c1 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9512e8c2edb34dc7ad3bcac4ce63a430 rdf:first ; + rdf:rest _:N9600326f07e84fd0b5702dbba8fb5692 . + + _:N9539a3aa8f2640ccbf5e3147b95d0acd sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre . + + _:N95a2e8e0514048c496ba86d6678afb52 rdf:first ; + rdf:rest _:Na5ef2f7d581a4fbeab399f28f36514fc . + + _:N95c3ead21e6e4ecd95af23263451b25e sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:N9600326f07e84fd0b5702dbba8fb5692 rdf:first ; + rdf:rest _:Ne75a3e4d4bce46dfbf2794c7bec43888 . + + _:N96aafef3616e46f882877b2a7e11b757 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance . + + _:N96c77573f7d244af98fbb31a9a921415 sh:class ns5:CvssSeverityType ; + sh:in _:N0725b77584894b4c82b93fc68df0a45d ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:N97f27abc23b9427f8445614385fdd5e7 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9919f57d67bd4992ac37a637007f56b9 rdf:first ; + rdf:rest _:Nf562af8defe04dbc89db49905f399a11 . + + _:N993312a33ff8406aaa62fb12f728a245 rdf:first ; + rdf:rest _:Nd74f1a1f51db45fc8a121a72f2810ce9 . + + _:N99c1538993cb4cc0a17aa9ebc04745e5 rdf:first ; + rdf:rest _:N5d7b7ab80ba94da78154e51e39f4b55d . + + _:N99de8e9db44844b5a9d11b197386f3d0 rdf:first ; + rdf:rest _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb . + + _:N9a16803acd9b4de0a606f5c7ca338d46 rdf:first ; + rdf:rest _:Nb41bc224042f48e3b42c657cad654e89 . + + _:N9af46730ac5e4549a37713d578ca2c0c sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b073a51b7934d96882a3d7b2516e6ee sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:N9b28133398a64d5eb219290008f464a6 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric . + + _:N9b30e49ee021458b83b41fb0202c4043 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml . + + _:N9b9a98064ff244dab80a08bdd5555d88 rdf:first ; + rdf:rest _:N24390832561247ea9edbcfeca24f67aa . + + _:N9dd1290b25404776b84fe5a85801893f rdf:first ; + rdf:rest _:N795110769b4a40288bd376f538317c4c . + + _:N9e907f1b2a0a4dbfa462bb2801f85a99 sh:class ns6:ContentIdentifierType ; + sh:in _:N1192103857734e528f997dca990b3645 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType . + + _:N9ebeb1bc85e741fb8d52f00b17dd5edb sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:N9ef78d5edabf4efbb280aa669f60517d rdf:first ; + rdf:rest _:Na084b549fa4a46ef9c69e235fea6cfdf . + + _:Na0207e8ebb3546d494a226941f26b82a sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Na063ca2df3034db0bf1b8b898aa3a404 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name . + + _:Na075cb0c74ec4575aa5a2c4301d28902 sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing . + + _:Na084b549fa4a46ef9c69e235fea6cfdf rdf:first ; + rdf:rest _:N7d38e5ecd3ab4556b895637c8beeb598 . + + _:Na183d066b46d4b6e86d08b078d501e3d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na1a58d858f5445009e4e9c1c79b01ee8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Na242505ccf884ef29a794e57c9d3ddc8 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Na2ab1463e071402b941a055cf25405d0 sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Na34b9857d3494dd3bc57ea0aac372489 rdf:first ; + rdf:rest _:N575a40dcf9d2470382a3cb67027db887 . + + _:Na4c9815bb1c74163aad85a1b13e04f13 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" . + + _:Na4c9bfc328f44f7a82b4bb6b0d500714 rdf:first ; + rdf:rest _:Na7d9beb4671848ceafe78da042cf29b8 . + + _:Na5a947182f8f431690f104df52b37ae4 rdf:first ; + rdf:rest _:N43b644328d464248beda66a9dc1b24f0 . + + _:Na5ef2f7d581a4fbeab399f28f36514fc rdf:first ; + rdf:rest _:Nefb954041ff74e1c981f465bcaab5d3b . + + _:Na69fc7a1c2654979ada4d85b1717874b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism . + + _:Na6e92abe54d446e79e8c88579ac830f2 rdf:first ; + rdf:rest _:N6a47af8674814d9a92314ce9c053556a . + + _:Na6ee2b8d1d624e21ae8b60f60a68d84d sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue . + + _:Na71e0164a5d7491f82b21b32a559f2a4 rdf:first ; + rdf:rest _:N093bbb61d9594baa8b978ad303aad6af . + + _:Na7d9beb4671848ceafe78da042cf29b8 rdf:first ; + rdf:rest _:Nf88be8ef2ebb4b8284efc3143b301313 . + + _:Na84c1e23d6e44da4b4f3fda68fe0b3e3 rdf:first ; + rdf:rest _:N9b9a98064ff244dab80a08bdd5555d88 . + + _:Na8d8ac54c0434708b78fe73a4d8e0660 rdf:first ; + rdf:rest _:Nc6682f937eb14a9faa960932d60969c2 . + + _:Na93b9a0680a145d7ad7614c15215165f rdf:first ; + rdf:rest _:N81a6a212754843d3aba0e84f43791e7f . + + _:Na9652088c7d74da4a70741160e010184 rdf:first ; + rdf:rest _:Nb94c57793202400e991c908c29f04c8d . + + _:Nabf8267e85fe497f80f96eaecb2a8ecc rdf:first ; + rdf:rest _:N7381b5af92324165b38a2ef399a3d683 . + + _:Nac7de1144825418b96a3c43ff6d678a6 rdf:first ; + rdf:rest _:Ncc8fbdb6574b455aa71ca75a347cd39f . + + _:Nacf93e2dadec4cf5a6eddab055d67599 sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import . + + _:Nad16ba6a202e461689abc70b9fcea166 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText . + + _:Nae4f8b47fa644be6b9a1efc5c4e5a57e rdf:first ; + rdf:rest _:N31d552db951b47269f52c41b41761d5d . + + _:Naf98619f104747d192028a17f0ecd8bb rdf:first ; + rdf:rest _:N4c52d9d036934841b17eac13b27a39f8 . + + _:Nb076c63c99944bff81f8ce7e21fbf841 rdf:first ; + rdf:rest _:N0786949c6ae949ca971b0870a39e5628 . + + _:Nb09aae7f35a946528a44d9a113f868cb rdf:first ; + rdf:rest _:N7ce5215fd77b4391bb0faf9a289c9651 . + + _:Nb0a6e8b29d9644ebad6cd2f67f423b47 sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter . + + _:Nb0e55a7a3f404b718aa14c0523f748fc rdf:first ; + rdf:rest _:N8c4178586ccf4f6aac7bc77998ce8216 . + + _:Nb121f71437a9448ab9d30679e6c6e290 rdf:first ; + rdf:rest _:Ne74d9ee0343b4b299f81fa823f3baa12 . + + _:Nb29082bbf3a54faf833061815ecea3cd rdf:first ; + rdf:rest _:Nb0e55a7a3f404b718aa14c0523f748fc . + + _:Nb30a287d827e4316be15597c73c84fef rdf:first ; + rdf:rest _:N341f19d094bb4183a2db06364073f914 . + + _:Nb3d9d9553ea04f749108d2000dfc3953 rdf:first ; + rdf:rest _:N87a01dfcca5f46d5a1312f1f1f5b2cd3 . + + _:Nb41bc224042f48e3b42c657cad654e89 rdf:first ; + rdf:rest _:Nd81e7e097668428d8d37dd7470a77974 . + + _:Nb5ab3d7d4f924cb1be94bf605ee733c2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy . + + _:Nb5d70b9706cb46a29801cbcb49dffef6 rdf:first ; + rdf:rest _:N497a6b43b7584ce9a497817fce159210 . + + _:Nb757eb766bcf484dab7fcc8640520f26 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nb79e78a0d55242f68b3169bb1d0ec6bc sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation . + + _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 rdf:first ; + rdf:rest _:N765d53a52f60469db1405497bbdeb524 . + + _:Nb831ba68859845819894bc24124f2493 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority . + + _:Nb8bc8bf36ce34c4088051dc1208e1af9 rdf:first ; + rdf:rest _:N88d076d5560e44378fc63f2196d3e9be . + + _:Nb8f515d8797c45b7894e3e707f5223fd rdf:first ; + rdf:rest _:N6484abf63505400facffdf4a86936716 . + + _:Nb94c57793202400e991c908c29f04c8d rdf:first ; + rdf:rest _:N60b7e732109b4d57a2174a1793e81730 . + + _:Nb964a7ec32c84ad9a7e5068cf4f02822 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement . + + _:Nb97582dc84eb41e1aea78c6e5c7640d5 sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element . + + _:Nb9bb8e59941d436cb193d8d8ecd38cce sh:class ns5:CvssSeverityType ; + sh:in _:N464f3e9fe6dc411b88a93fb1c9045967 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity . + + _:Nba1a37de924c499f9ea9e93d8961d20a rdf:first ; + rdf:rest _:Nd8636a05db834b139d4b2d9900e807b3 . + + _:Nba7479035af442ada086c0338c451097 sh:class ns3:ExternalIdentifierType ; + sh:in _:Na9652088c7d74da4a70741160e010184 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType . + + _:Nbb4d130582c44c00bdc80ffc03d8dde6 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText . + + _:Nbc8699aa0f544965affe9ba57e69fa78 rdf:first ; + rdf:rest _:N5484226f71e247459aecae3701f31924 . + + _:Nbc8ad111179e4d28aeca12d049d01869 rdf:first ; + rdf:rest _:N604da09912b74a828b98bb6b28fbf0a7 . + + _:Nbc9ecbd1db234efabb062c64c5b1582e rdf:first ; + rdf:rest _:Nd348352c7de54765832cc19f3d43300c . + + _:Nbd3441f77ea64600b8f311e26c76a5cd rdf:first ; + rdf:rest _:N8e9938cc2a3c4da9abce340cca712edd . + + _:Nbd4cabc421bb46b3977fcf236c7870ff sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact . + + _:Nbd5d22a16c594086a7dab4ce2199d3be rdf:first ; + rdf:rest _:N91f490513b4b406b85ec22decdb5274a . + + _:Nbd73767485264c33bc64cc9b42c99b88 rdf:first ; + rdf:rest _:Na93b9a0680a145d7ad7614c15215165f . + + _:Nbdef0d6b9a2a427fb4b1814e3c775c93 rdf:first ; + rdf:rest _:N2dc39d16ee9f4be191ad3506bae0c216 . + + _:Nbe7b313a45b948c6a406f37ccd2c5ee6 rdf:first ; + rdf:rest _:Ndf398217fce6424ca2d23712e71263fb . + + _:Nbeb8b7d55cf74321942fb0ae3da5add9 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Nbed0dcc3c778406db4d3f6eca8c4c177 rdf:first ; + rdf:rest _:Nc27cd84531894867a3501b47035a2c04 . + + _:Nbfc53449413c4390876a7291e180ba07 rdf:first ; + rdf:rest _:Nf1f23fee13584cbeb79e3baa0c6b05b2 . + + _:Nbfec1cd5e43649cba6485b1a01ec1b68 rdf:first ; + rdf:rest _:Nb8bc8bf36ce34c4088051dc1208e1af9 . + + _:Nc06c93e4d64345e59c0208ac0c2f799b rdf:first ; + rdf:rest _:Nc5aa8a1325b0473daf3d15821b492d34 . + + _:Nc07374747c9448faae0e1e2622db1d7d sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" . + + _:Nc0cbe94b1b9f4c518494e91bc175e759 rdf:first ; + rdf:rest _:N47bf567d302048459f09bc6f9e280b5e . + + _:Nc12aef8332fd4b9484195f299f484175 rdf:first ; + rdf:rest _:Nf4e6c1ca88814f8983b689a6d618c839 . + + _:Nc1f593d31b694f8d899bab4cfafbc332 rdf:first ; + rdf:rest _:N7265cf39508f4d7d8064b01c6fc7af91 . + + _:Nc21c14ad1d3a4e3ea9fc14563d646d8d sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member . + + _:Nc27cd84531894867a3501b47035a2c04 rdf:first ; + rdf:rest _:Nf1da170952db48feafb61cf8eea0c317 . + + _:Nc36cca07a48048b18bee65bd265e3473 sh:class ns3:PresenceType ; + sh:in _:N45d29e6a8f964d629bcfd38e8a2812df ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation . + + _:Nc37338dfb4174f0492ed890f475cafc1 rdf:first ; + rdf:rest _:N51a6abe36bbb4a9a8cce23555b0fa72a . + + _:Nc4c2447375154c088326785e5201d90c rdf:first ; + rdf:rest _:N4570847561a247b190684fe248fa523f . + + _:Nc505579387424472888c03cc153dd107 rdf:first ; + rdf:rest _:N35748216664842588d1d2428d0238f7c . + + _:Nc5aa8a1325b0473daf3d15821b492d34 rdf:first ; + rdf:rest _:Ncf95e811579f435d8190022c27ddc51e . + + _:Nc6682f937eb14a9faa960932d60969c2 rdf:first ; + rdf:rest _:N41bfdb0844834a9296a04a2b771b30d7 . + + _:Nc68de2290dec4037b97bb40ca8c0adb1 rdf:first ; + rdf:rest _:Nd34fffad560944e88cd9ddfe76e7554c . + + _:Nc68e4e19132d4f32946d541ef17aaf0f sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace . + + _:Nc849cbed1d4d47158d3a8ce5af53fc2a sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange . + + _:Nc8cdfd8c3ff74b469faab892beaa7bd5 rdf:first ; + rdf:rest _:Nb121f71437a9448ab9d30679e6c6e290 . + + _:Nca3d4237e69846fa81bc53dc43b6029e sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncaa9a447e341490894b8ea06dc485a0c sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain . + + _:Ncc31c01eeda0480ea00ea96b0f811739 sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef . + + _:Ncc8fbdb6574b455aa71ca75a347cd39f rdf:first ; + rdf:rest _:N2f9a893241114b04a570a074eb5e90fd . + + _:Ncd5a93b6120a456e8dc0d3aa1b1a461c rdf:first ; + rdf:rest _:Nd6035645b90646908c1881b4d968ce2e . + + _:Ncd772398fef24acfb9c377355aaa70e4 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nce1c9f7707b749df9c04405465f5d693 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Ncf95e811579f435d8190022c27ddc51e rdf:first ; + rdf:rest _:Nf29c3df33a36484ea8218e1467f21b77 . + + _:Nd25a98977037415f94236e4881c554c0 rdf:first ; + rdf:rest _:N81e9711becff48eaa08e25e5b6fea9c9 . + + _:Nd34755ea58bd4430b6e06edfe49d3836 sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score . + + _:Nd348352c7de54765832cc19f3d43300c rdf:first ; + rdf:rest _:N8737dc2b1bd6408b852d2324c6ce404e . + + _:Nd34fffad560944e88cd9ddfe76e7554c rdf:first ; + rdf:rest () . + + _:Nd498732042494722ac01f812b9752e13 rdf:first ; + rdf:rest _:Nb09aae7f35a946528a44d9a113f868cb . + + _:Nd4b47d4885624e31ab7ede832237afeb sh:class ns3:AnnotationType ; + sh:in _:N6cb4c4347f154af1b5c9d61bdb1d6485 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType . + + _:Nd507d892ccf546c68470c2ad1de481bc sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy . + + _:Nd5b0cc3893294e8b9a546e75d437ff15 sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense . + + _:Nd6035645b90646908c1881b4d968ce2e rdf:first ; + rdf:rest _:Ne55baec5fd904832ad3e305685422c87 . + + _:Nd685430b1a9c44d6abb820e3d22ad9fc rdf:first ; + rdf:rest _:N1e65c28f50ca472e8d766dd913f3ecc1 . + + _:Nd696d0bece9045cfa929993fc189dab6 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion . + + _:Nd6fa5fcf79af41aca71f798a61820519 rdf:first ; + rdf:rest _:Neea78b34b53645d9b977d4dafb032fbb . + + _:Nd72c256eb46a430db7454aad221ffc59 rdf:first ; + rdf:rest () . + + _:Nd72eee1dacf14634b4ccb3f926804521 rdf:first ; + rdf:rest _:N402019128a2449e3b5be3f04ec1f62f4 . + + _:Nd74f1a1f51db45fc8a121a72f2810ce9 rdf:first ; + rdf:rest _:Nbd5d22a16c594086a7dab4ce2199d3be . + + _:Nd81e7e097668428d8d37dd7470a77974 rdf:first ; + rdf:rest _:Ne08cc9309fbc4c70a85a57e7133b72c9 . + + _:Nd8636a05db834b139d4b2d9900e807b3 rdf:first ; + rdf:rest _:N02216a682b174628b5883d37733d43f4 . + + _:Nd8b38be0c57d489a82194c062bbe0b40 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise . + + _:Nd9b0e8688faa4db8bc021fe50af253fe sh:class ns4:DatasetAvailabilityType ; + sh:in _:Nc37338dfb4174f0492ed890f475cafc1 ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability . + + _:Nda2c2ba3d01c418691e78e82ec5ab9d6 rdf:first ; + rdf:rest _:Nabf8267e85fe497f80f96eaecb2a8ecc . + + _:Ndaae4f6aabcc43579b940eeb55b7fa09 sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from . + + _:Ndb15970ce7d34e878a0a7123dad52212 sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange . + + _:Ndb4e54e4ff284342bf2f11f51d7f2567 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndb89662869e64a20938720be32e56b7b rdf:first ; + rdf:rest _:N06c2ea1f5832433aa8d0e7612d230380 . + + _:Ndba01dc226ee49c3be1b757c1787cb43 rdf:first ; + rdf:rest _:N6ca95996c3ba43bdbff56b6d5b9fdab9 . + + _:Ndc1cec228c454b62a5ab7eee0eab8995 rdf:first ; + rdf:rest _:N7634a4c745c849d5b147ccbf41ef2bcb . + + _:Ndc9ca13ca7e045a890f1b0f580371051 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue . + + _:Ndd62961c42b449c7999ac09e91c55bb2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion . + + _:Ndf280172f0834544a7759efee893b7d1 sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap . + + _:Ndf398217fce6424ca2d23712e71263fb rdf:first ; + rdf:rest _:N09d41b24e37944889b085f3a5dec27a2 . + + _:Ne0351ee38a2940df9a643908f3c04c78 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier . + + _:Ne08cc9309fbc4c70a85a57e7133b72c9 rdf:first ; + rdf:rest _:Nf253c5f3fc0f40728e3b713da72f534f . + + _:Ne09d8237f43b483293ea5b23d9d378c9 rdf:first ; + rdf:rest _:N9dd1290b25404776b84fe5a85801893f . + + _:Ne0e964c633594ba097b6a750a6ade092 rdf:first ; + rdf:rest _:N89b556da50e44c328fa4742ba07ad842 . + + _:Ne0ead3de0c1842e8803711c778d3de8f rdf:first ; + rdf:rest _:Nfe7bb70385ba4334afb3dd58e4476443 . + + _:Ne16b834cedfa4b8db4d362a45561064d rdf:first ; + rdf:rest _:N19bf11d3eb754e10bd676b9b7780555e . + + _:Ne1807e7da3dc42d8921080afa2df652f rdf:first ; + rdf:rest _:N353f7075a1fe48b3b7b7af086e4aa2ed . + + _:Ne1daaa3e8de142d9b4b0399fc62bc270 rdf:first ; + rdf:rest _:N5aebbc4f9aa74a9ca8a930203a1284f2 . + + _:Ne25f494d3fbc45bfae592617345de5db rdf:first ; + rdf:rest _:N7135267418f04789a477e78eef34865e . + + _:Ne2ff293b6d084635bd69a6ad308a4ea9 rdf:first ; + rdf:rest _:N5c7bcd96bfe24354b9199d05991a1c3c . + + _:Ne30781691aca482680ffd9bbd2045c91 rdf:first ; + rdf:rest _:N1bc2f7dd56904c86b46e121aeb8cb636 . + + _:Ne36b98993a6a41abaca571a82d61050c rdf:first ; + rdf:rest () . + + _:Ne3c684285049449e9ee58f318c943f4f rdf:first ; + rdf:rest () . + + _:Ne3e78235566445608978be9329e74cc2 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion . + + _:Ne452fc8d239747848f49c2ac0d8e39d8 sh:class ns3:HashAlgorithm ; + sh:in _:Ne25f494d3fbc45bfae592617345de5db ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Ne4b5d8545c4c40c394f6fcfbf82ac649 rdf:first ; + rdf:rest _:N7c577594e1734b4ebabc9b18761d5162 . + + _:Ne55baec5fd904832ad3e305685422c87 rdf:first ; + rdf:rest _:N5f88e1becb864ed4b48bf6a4398f3638 . + + _:Ne63e0f50816b4addb79d58c16a81bee3 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value . + + _:Ne71793c1d96b4398876c3fddfc0f543d rdf:first ; + rdf:rest () . + + _:Ne74d9ee0343b4b299f81fa823f3baa12 rdf:first ; + rdf:rest _:Nb7f8e0e59a4c411f98ebbb574ae9b0d6 . + + _:Ne75a3e4d4bce46dfbf2794c7bec43888 rdf:first ; + rdf:rest _:N8e015961b7e9410e98c4287ad1a58ebb . + + _:Neac9dbcbb01c41b9aa58fa84eeec98d3 rdf:first ; + rdf:rest _:Nba1a37de924c499f9ea9e93d8961d20a . + + _:Neb7d9e3129e841ffba55cfcffa695a61 rdf:first ; + rdf:rest _:N08c151d77c034260b733a9cd4fb2db47 . + + _:Neba2498dd09a4417a0ad37b9ab3e5e69 rdf:first ; + rdf:rest _:N64aa778e8d414bb58cc29d8a040aa5b5 . + + _:Ned0fe992065d49dd890483be50cffa45 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement . + + _:Neea78b34b53645d9b977d4dafb032fbb rdf:first ; + rdf:rest _:Ne30781691aca482680ffd9bbd2045c91 . + + _:Nef0b82c6d2ef4a5c8dbd141212401b13 rdf:first ; + rdf:rest _:N844378f645c04baba1e77ba4c91a005c . + + _:Nef779dc58efd41708d2dd810a1c22861 sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess . + + _:Nefb954041ff74e1c981f465bcaab5d3b rdf:first ; + rdf:rest _:N12791c5f96074c62a3ed255af776b87b . + + _:Nefba3a71506d41cfabbc865580be12f7 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId . + + _:Neff504856bd94814a0299fb077c1ba98 sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path . + + _:Nf016298471ac4dc394002a7ecea87e4a rdf:first ; + rdf:rest () . + + _:Nf07f4220a2fd47bea00636caef099680 rdf:first ; + rdf:rest () . + + _:Nf0f59f499fc84e7cadb021d1e8ba60ce sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier . + + _:Nf0f7baf6832e47c7a1ec5c0cb9679eeb rdf:first ; + rdf:rest _:Ndb89662869e64a20938720be32e56b7b . + + _:Nf0f8e43d5c7b417bb04959276983ea1c rdf:first ; + rdf:rest () . + + _:Nf1da170952db48feafb61cf8eea0c317 rdf:first ; + rdf:rest _:Ne1daaa3e8de142d9b4b0399fc62bc270 . + + _:Nf1f23fee13584cbeb79e3baa0c6b05b2 rdf:first ; + rdf:rest _:N42c7e772b0ff4d5d9a97a8c3334d8a58 . + + _:Nf208bbcafacb4617ad8ce48ed0c5320a sh:class ns3:PresenceType ; + sh:in _:N28454dc7d61d47bd9f19e037f20819ed ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation . + + _:Nf253c5f3fc0f40728e3b713da72f534f rdf:first ; + rdf:rest _:N82d87d74437f447f8c64422e7639002d . + + _:Nf25ca42c5bdc464f96d7d59ad9fcbf86 rdf:first ; + rdf:rest _:Nc06c93e4d64345e59c0208ac0c2f799b . + + _:Nf29c3df33a36484ea8218e1467f21b77 rdf:first ; + rdf:rest _:N93517a28b24343c8a9247206129a9684 . + + _:Nf34b3b1798cd4b95ad7460d818440421 rdf:first ; + rdf:rest () . + + _:Nf4e6c1ca88814f8983b689a6d618c839 rdf:first ; + rdf:rest _:N69eefd6c115c4499be60a56a329082ed . + + _:Nf562af8defe04dbc89db49905f399a11 rdf:first ; + rdf:rest _:N5db3bc3ac4ca4493a796356af601403e . + + _:Nf5c2326720d14f579097f3ab47e8c762 rdf:first ; + rdf:rest _:Na34b9857d3494dd3bc57ea0aac372489 . + + _:Nf5ff1d1055e34b2cb95f75f6c7657265 rdf:first ; + rdf:rest _:N7c00958b8c7c491d82e976dea47764ee . + + _:Nf679cce397cb41148e4dbc0de457788b sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement . + + _:Nf71e260bcc9940d2b8cb0fdf962a1454 sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved . + + _:Nf8415ef95b3f4cf9a713cc1cdb95ad83 rdf:first ; + rdf:rest _:N0e2779bcf1bd430f8f30fa6286429aa8 . + + _:Nf88be8ef2ebb4b8284efc3143b301313 rdf:first ; + rdf:rest () . + + _:Nf91d5c31a6274b259ae9d3da7de37c4d rdf:first ; + rdf:rest _:N349791578bd441d7b8f76b4673275235 . + + _:Nf9c56978821e4d65b3c9e6089e72244f sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString . + + _:Nf9e398de7c23460c95e7fec63c92065d rdf:first ; + rdf:rest _:N5546070c54224ce482c3cbd8b3c5d898 . + + _:Nfaab51f8ebca452e84e1031a425be7d5 sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" . + + _:Nfb33f9dd13074a5393c69c370e2cb4f3 rdf:first ; + rdf:rest () . + + _:Nfb4eb9c4c5c24f71b28b0d4eb9428a71 sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator . + + _:Nfbb90564d62a49c99f3ad124bf572c0a rdf:first ; + rdf:rest _:N907869d713e3425588796c37fb9c49c1 . + + _:Nfc1ba2b198a0488b97e460730d5d8314 rdf:first ; + rdf:rest _:Nbfc53449413c4390876a7291e180ba07 . + + _:Nfc42797a854d4008a99f6062c2875fc3 rdf:first ; + rdf:rest _:N3a5f5817b005498690770268a7749990 . + + _:Nfe008f6511404b5b9d251ae6f0e14f51 sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path . + + _:Nfe7bb70385ba4334afb3dd58e4476443 rdf:first ; + rdf:rest _:N3484c741d91a4723b5c7f52d12122e53 . + + _:Nfea77563e3c34609b220695df9edc63c sh:class ns3:HashAlgorithm ; + sh:in _:Neac9dbcbb01c41b9aa58fa84eeec98d3 ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm . + + _:Nfec76341615042fa920d080bb121bd66 rdf:first ; + rdf:rest _:N7f32ec55b71f438fa081e1ea71e23e12 . +} + diff --git a/v3.0/rdf/spdx-model.ttl b/v3.0/rdf/spdx-model.ttl new file mode 100644 index 0000000000..8cf3655eba --- /dev/null +++ b/v3.0/rdf/spdx-model.ttl @@ -0,0 +1,3267 @@ +@prefix dcterms: . +@prefix ns1: . +@prefix ns2: . +@prefix ns3: . +@prefix ns4: . +@prefix ns5: . +@prefix ns6: . +@prefix ns7: . +@prefix omg-ann: . +@prefix owl: . +@prefix rdf: . +@prefix rdfs: . +@prefix sh: . +@prefix spdx: . +@prefix xsd: . + +ns2:AIPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies an AI package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:autonomyType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelDataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:modelExplainability ], + [ sh:class ns2:SafetyRiskAssessmentType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:safetyRiskAssessment ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutTraining ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:typeOfModel ], + [ sh:class ns2:EnergyConsumption ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:energyConsumption ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metricDecisionThreshold ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:informationAboutApplication ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:standardCompliance ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:metric ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:hyperparameter ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:limitation ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:useSensitivePersonalInformation ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns2:domain ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "Class that describes a build instance of software/artifacts."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:class ns3:Hash ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns3:Annotation a owl:Class, + sh:NodeShape ; + rdfs:comment "An assertion made in relation to one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:subject ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:AnnotationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:annotationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:statement ] . + +ns3:LifecycleScopedRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provide context for a relationship that occurs in the lifecycle."@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:LifecycleScopeType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:scope ] . + +ns3:NoAssertionElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number)."""@en . + +ns3:NoneElement a owl:NamedIndividual, + ns3:Element ; + rdfs:comment """An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero."""@en . + +ns3:PackageVerificationCode a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX version 2.X compatible verification method for software packages."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:packageVerificationCodeExcludedFile ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + +ns3:Person a owl:Class ; + rdfs:comment "An individual human being."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SoftwareAgent a owl:Class ; + rdfs:comment "A software agent."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + +ns3:SpdxDocument a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements that could potentially be serialized."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:dataLicense ], + [ sh:class ns3:ExternalMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:import ], + [ sh:class ns3:NamespaceMap ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:namespaceMap ] . + +ns3:SpdxOrganization a owl:NamedIndividual, + ns3:Organization ; + rdfs:comment "An Organization representing the SPDX Project."@en ; + owl:sameAs . + +ns4:DatasetPackage a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a data package and its associated information."@en ; + rdfs:subClassOf ns6:Package ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns4:ConfidentialityLevelType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:confidentialityLevel ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataPreprocessing ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:knownBias ], + [ sh:class ns4:DatasetType ; + sh:in ( ) ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetType ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns4:anonymizationMethodUsed ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns4:sensor ], + [ sh:datatype xsd:nonNegativeInteger ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetSize ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:intendedUse ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetUpdateMechanism ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:datasetNoise ], + [ sh:class ns4:DatasetAvailabilityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:datasetAvailability ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns4:dataCollectionProcess ], + [ sh:class ns3:PresenceType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns4:hasSensitivePersonalInformation ] . + +ns7:ConjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:CustomLicense a owl:Class ; + rdfs:comment "A license that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI . + +ns7:CustomLicenseAddition a owl:Class ; + rdfs:comment "A license addition that is not listed on the SPDX Exceptions List."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI . + +ns7:DisjunctiveLicenseSet a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:minCount 2 ; + sh:nodeKind sh:IRI ; + sh:path ns7:member ] . + +ns7:ListedLicense a owl:Class, + sh:NodeShape ; + rdfs:comment "A license that is listed on the SPDX License List."@en ; + rdfs:subClassOf ns7:License ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:ListedLicenseException a owl:Class, + sh:NodeShape ; + rdfs:comment "A license exception that is listed on the SPDX Exceptions list."@en ; + rdfs:subClassOf ns7:LicenseAddition ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:listVersionAdded ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:deprecatedVersion ] . + +ns7:NoAssertionLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License when no assertion can be made about its actual +value."""@en ; + owl:sameAs . + +ns7:NoneLicense a owl:NamedIndividual, + ns7:IndividualLicensingInfo ; + rdfs:comment """An Individual Value for License where the SPDX data creator determines that no +license is present."""@en ; + owl:sameAs . + +ns7:OrLaterOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License."""@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:License ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectLicense ] . + +ns7:WithAdditionOperator a owl:Class, + sh:NodeShape ; + rdfs:comment """Portion of an AnyLicenseInfo representing a License which has additional +text applied to it."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns7:LicenseAddition ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectAddition ], + [ sh:class ns7:ExtendableLicense ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns7:subjectExtendableLicense ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A type of extension consisting of a list of name value pairs."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ] . + +ns5:CvssV2VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 2.0 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:CvssV3VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 3 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ] . + +ns5:CvssV4VulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides a CVSS version 4 assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:CvssSeverityType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:severity ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:score ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vectorString ] . + +ns5:EpssVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an EPSS assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:percentile ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:probability ] . + +ns5:ExploitCatalogVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an exploit assessment of a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:ExploitCatalogType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:catalogType ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:exploited ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:locator ] . + +ns5:SsvcVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an SSVC assessment for a vulnerability."@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns5:SsvcDecisionType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:decisionType ] . + +ns5:VexAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Connects a vulnerability and an element designating the element as a product +affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:actionStatement ] . + +ns5:VexFixedVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:VexNotAffectedVulnAssessmentRelationship a owl:Class, + sh:NodeShape ; + rdfs:comment """Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatementTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns5:VexJustificationType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:justificationType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:impactStatement ] . + +ns5:VexUnderInvestigationVulnAssessmentRelationship a owl:Class ; + rdfs:comment """Designates elements as products where the impact of a vulnerability is being +investigated."""@en ; + rdfs:subClassOf ns5:VexVulnAssessmentRelationship ; + sh:nodeKind sh:IRI . + +ns5:Vulnerability a owl:Class, + sh:NodeShape ; + rdfs:comment "Specifies a vulnerability and its associated information."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "An SPDX Element containing an SPDX license expression string."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ], + [ sh:class ns3:DictionaryEntry ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A license or addition that is not listed on the SPDX License List."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + +ns6:Sbom a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of SPDX Elements describing a single package."@en ; + rdfs:subClassOf ns3:Bom ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SbomType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:sbomType ] . + +ns6:Snippet a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a certain part of a file."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:File ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:snippetFromFile ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:lineRange ], + [ sh:class ns3:PositiveIntegerRange ; + sh:maxCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:byteRange ] . + +spdx: a owl:Ontology ; + rdfs:label "System Package Data Exchange (SPDX) Ontology"@en ; + dcterms:abstract "This ontology defines the terms and relationships used in the SPDX specification to describe system packages"@en ; + dcterms:created "2024-04-05"^^xsd:date ; + dcterms:creator "SPDX Project"@en ; + dcterms:license ; + dcterms:references ; + dcterms:title "System Package Data Exchange (SPDX) Ontology"@en ; + owl:versionIRI spdx: ; + omg-ann:copyright "Copyright (C) 2024 SPDX Project"@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "kilowattHour" ; + rdfs:comment "Kilowatt-hour."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "megajoule" ; + rdfs:comment "Megajoule."@en . + + a owl:NamedIndividual, + ns2:EnergyUnitType ; + rdfs:label "other" ; + rdfs:comment "Any other units of energy measurement."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "high" ; + rdfs:comment "The second-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "low" ; + rdfs:comment "Low/no risk is posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "medium" ; + rdfs:comment "The third-highest level of risk posed by an AI system."@en . + + a owl:NamedIndividual, + ns2:SafetyRiskAssessmentType ; + rdfs:label "serious" ; + rdfs:comment "The highest level of risk posed by an AI system."@en . + +ns2:autonomyType a owl:ObjectProperty ; + rdfs:comment """Indicates whether the system can perform a decision or action without human +involvement or guidance."""@en ; + rdfs:range ns3:PresenceType . + +ns2:domain a owl:DatatypeProperty ; + rdfs:comment "Captures the domain in which the AI package can be used."@en ; + rdfs:range xsd:string . + +ns2:energyConsumption a owl:ObjectProperty ; + rdfs:comment "Indicates the amount of energy consumption incurred by an AI model."@en ; + rdfs:range ns2:EnergyConsumption . + +ns2:energyQuantity a owl:DatatypeProperty ; + rdfs:comment "Represents the energy quantity."@en ; + rdfs:range xsd:decimal . + +ns2:energyUnit a owl:ObjectProperty ; + rdfs:comment "Specifies the unit in which energy is measured."@en ; + rdfs:range ns2:EnergyUnitType . + +ns2:finetuningEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:hyperparameter a owl:ObjectProperty ; + rdfs:comment """Records a hyperparameter used to build the AI model contained in the AI +package."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:inferenceEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:informationAboutApplication a owl:DatatypeProperty ; + rdfs:comment """Provides relevant information about the AI software, not including the model +description."""@en ; + rdfs:range xsd:string . + +ns2:informationAboutTraining a owl:DatatypeProperty ; + rdfs:comment "Describes relevant information about different steps of the training process."@en ; + rdfs:range xsd:string . + +ns2:limitation a owl:DatatypeProperty ; + rdfs:comment "Captures a limitation of the AI software."@en ; + rdfs:range xsd:string . + +ns2:metric a owl:ObjectProperty ; + rdfs:comment "Records the measurement of prediction quality of the AI model."@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:metricDecisionThreshold a owl:ObjectProperty ; + rdfs:comment """Captures the threshold that was used for computation of a metric described in +the metric field."""@en ; + rdfs:range ns3:DictionaryEntry . + +ns2:modelDataPreprocessing a owl:DatatypeProperty ; + rdfs:comment """Describes all the preprocessing steps applied to the training data before the +model training."""@en ; + rdfs:range xsd:string . + +ns2:modelExplainability a owl:DatatypeProperty ; + rdfs:comment "Describes methods that can be used to explain the results from the AI model."@en ; + rdfs:range xsd:string . + +ns2:safetyRiskAssessment a owl:ObjectProperty ; + rdfs:comment "Records the results of general safety risk assessment of the AI system."@en ; + rdfs:range ns2:SafetyRiskAssessmentType . + +ns2:standardCompliance a owl:DatatypeProperty ; + rdfs:comment "Captures a standard that is being complied with."@en ; + rdfs:range xsd:string . + +ns2:trainingEnergyConsumption a owl:ObjectProperty ; + rdfs:comment """Specifies the amount of energy consumed when training the AI model that is +being used in the AI system."""@en ; + rdfs:range ns2:EnergyConsumptionDescription . + +ns2:typeOfModel a owl:DatatypeProperty ; + rdfs:comment "Records the type of the model used in the AI software."@en ; + rdfs:range xsd:string . + +ns2:useSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment """Records if sensitive personal information is used during model training or +could be used during the inference."""@en ; + rdfs:range ns3:PresenceType . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the time at which a build stops."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it."""@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property describing the start time of a build."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment """A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on."""@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment """Property that describes the digest of the build configuration file used to +invoke a build."""@en ; + rdfs:range ns3:Hash . + + a owl:DatatypeProperty ; + rdfs:comment "Property describes the invocation entrypoint of a build."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "Property that describes the URI of the build configuration source file."@en ; + rdfs:range xsd:anyURI . + + a owl:ObjectProperty ; + rdfs:comment "Property describing the session in which a build is invoked."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:ObjectProperty ; + rdfs:comment "Property describing a parameter used in an instance of a build."@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "other" ; + rdfs:comment "Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element)."@en . + + a owl:NamedIndividual, + ns3:AnnotationType ; + rdfs:label "review" ; + rdfs:comment "Used when someone reviews the Element."@en . + +ns3:Bom a owl:Class ; + rdfs:comment """A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product."""@en ; + rdfs:subClassOf ns3:Bundle ; + sh:nodeKind sh:IRI . + +ns3:Bundle a owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements that have a shared context."@en ; + rdfs:subClassOf ns3:ElementCollection ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:context ] . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe22" ; + rdfs:comment "[Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cpe23" ; + rdfs:comment "[Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final)"@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "cve" ; + rdfs:comment "Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "email" ; + rdfs:comment "Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "packageUrl" ; + rdfs:comment "Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "securityOther" ; + rdfs:comment "Used when there is a security related identifier of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "swid" ; + rdfs:comment "Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:ExternalIdentifierType ; + rdfs:label "urlScheme" ; + rdfs:comment "[Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altDownloadLocation" ; + rdfs:comment "A reference to an alternative download location."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "altWebPage" ; + rdfs:comment "A reference to an alternative web page."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "binaryArtifact" ; + rdfs:comment "A reference to binary artifacts related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "bower" ; + rdfs:comment "A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the \"install\" section of [Bower API documentation](https://bower.io/docs/api/#install)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildMeta" ; + rdfs:comment "A reference build metadata related to a published package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "buildSystem" ; + rdfs:comment "A reference build system used to create or publish the package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "certificationReport" ; + rdfs:comment "A reference to a certification report for a package from an accredited/independent body."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "chat" ; + rdfs:comment "A reference to the instant messaging system used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "componentAnalysisReport" ; + rdfs:comment "A reference to a Software Composition Analysis (SCA) report."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "cwe" ; + rdfs:comment "[Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "documentation" ; + rdfs:comment "A reference to the documentation for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "dynamicAnalysisReport" ; + rdfs:comment "A reference to a dynamic analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "eolNotice" ; + rdfs:comment "A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "exportControlAssessment" ; + rdfs:comment "A reference to a export control assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "funding" ; + rdfs:comment "A reference to funding information related to a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "issueTracker" ; + rdfs:comment "A reference to the issue tracker for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "license" ; + rdfs:comment "A reference to additional license information related to an artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mailingList" ; + rdfs:comment "A reference to the mailing list used by the maintainer for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "mavenCentral" ; + rdfs:comment "A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "metrics" ; + rdfs:comment "A reference to metrics related to package such as OpenSSF scorecards."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "npm" ; + rdfs:comment "A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "nuget" ; + rdfs:comment "A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "other" ; + rdfs:comment "Used when the type does not match any of the other options."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "privacyAssessment" ; + rdfs:comment "A reference to a privacy assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "productMetadata" ; + rdfs:comment "A reference to additional product metadata such as reference within organization's product catalog."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "purchaseOrder" ; + rdfs:comment "A reference to a purchase order for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "qualityAssessmentReport" ; + rdfs:comment "A reference to a quality assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseHistory" ; + rdfs:comment "A reference to a published list of releases for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "releaseNotes" ; + rdfs:comment "A reference to the release notes for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "riskAssessment" ; + rdfs:comment "A reference to a risk assessment for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "runtimeAnalysisReport" ; + rdfs:comment "A reference to a runtime analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "secureSoftwareAttestation" ; + rdfs:comment "A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdversaryModel" ; + rdfs:comment "A reference to the security adversary model for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityAdvisory" ; + rdfs:comment "A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityFix" ; + rdfs:comment "A reference to the patch or source code that fixes a vulnerability."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityOther" ; + rdfs:comment "A reference to related security information of unspecified type."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPenTestReport" ; + rdfs:comment "A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityPolicy" ; + rdfs:comment "A reference to instructions for reporting newly discovered security vulnerabilities for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "securityThreatModel" ; + rdfs:comment "A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "socialMedia" ; + rdfs:comment "A reference to a social media channel for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "sourceArtifact" ; + rdfs:comment "A reference to an artifact containing the sources for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "staticAnalysisReport" ; + rdfs:comment "A reference to a static analysis report for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "support" ; + rdfs:comment "A reference to the software support channel or other support information for a package."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vcs" ; + rdfs:comment "A reference to a version control system related to a software artifact."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityDisclosureReport" ; + rdfs:comment "A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final)."@en . + + a owl:NamedIndividual, + ns3:ExternalRefType ; + rdfs:label "vulnerabilityExploitabilityAssessment" ; + rdfs:comment "A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf)."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "build" ; + rdfs:comment "A relationship has specific context implications during an element's build phase, during development."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "design" ; + rdfs:comment "A relationship has specific context implications during an element's design."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "development" ; + rdfs:comment "A relationship has specific context implications during development phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "other" ; + rdfs:comment "A relationship has other specific context information necessary to capture that the above set of enumerations does not handle."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "runtime" ; + rdfs:comment "A relationship has specific context implications during the execution phase of an element."@en . + + a owl:NamedIndividual, + ns3:LifecycleScopeType ; + rdfs:label "test" ; + rdfs:comment "A relationship has specific context implications during an element's testing phase, during development."@en . + +ns3:Organization a owl:Class ; + rdfs:comment "A group of people who work together in an organized way for a shared purpose."@en ; + rdfs:subClassOf ns3:Agent ; + sh:nodeKind sh:IRI . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "ai" ; + rdfs:comment "the element follows the AI profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "build" ; + rdfs:comment "the element follows the Build profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "core" ; + rdfs:comment "the element follows the Core profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "dataset" ; + rdfs:comment "the element follows the Dataset profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "expandedLicensing" ; + rdfs:comment "the element follows the expanded Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "extension" ; + rdfs:comment "the element follows the Extension profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "lite" ; + rdfs:comment "the element follows the Lite profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "security" ; + rdfs:comment "the element follows the Security profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "simpleLicensing" ; + rdfs:comment "the element follows the simple Licensing profile specification"@en . + + a owl:NamedIndividual, + ns3:ProfileIdentifierType ; + rdfs:label "software" ; + rdfs:comment "the element follows the Software profile specification"@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "complete" ; + rdfs:comment "The relationship is known to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "incomplete" ; + rdfs:comment "The relationship is known not to be exhaustive."@en . + + a owl:NamedIndividual, + ns3:RelationshipCompleteness ; + rdfs:label "noAssertion" ; + rdfs:comment "No assertion can be made about the completeness of the relationship."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "affects" ; + rdfs:comment "The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "amendedBy" ; + rdfs:comment "The `from` Element is amended by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "ancestorOf" ; + rdfs:comment "The `from` Element is an ancestor of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "availableFrom" ; + rdfs:comment "The `from` Element is available from the additional supplier described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "configures" ; + rdfs:comment "The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "contains" ; + rdfs:comment "The `from` Element contains each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "coordinatedBy" ; + rdfs:comment "The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "copiedTo" ; + rdfs:comment "The `from` Element has been copied to each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "delegatedTo" ; + rdfs:comment "The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "dependsOn" ; + rdfs:comment "The `from` Element depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "descendantOf" ; + rdfs:comment "The `from` Element is a descendant of each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "describes" ; + rdfs:comment "The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "doesNotAffect" ; + rdfs:comment "The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "expandsTo" ; + rdfs:comment "The `from` archive expands out as an artifact described by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "exploitCreatedBy" ; + rdfs:comment "The `from` Vulnerability has had an exploit created against it by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedBy" ; + rdfs:comment "Designates a `from` Vulnerability has been fixed by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "fixedIn" ; + rdfs:comment "A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "foundBy" ; + rdfs:comment "Designates a `from` Vulnerability was originally discovered by the `to` Agent(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "generates" ; + rdfs:comment "The `from` Element generates each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAddedFile" ; + rdfs:comment "Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssessmentFor" ; + rdfs:comment "Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasAssociatedVulnerability" ; + rdfs:comment "Used to associate a `from` Artifact with each `to` Vulnerability."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasConcludedLicense" ; + rdfs:comment "The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDataFile" ; + rdfs:comment "The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeclaredLicense" ; + rdfs:comment "The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDeletedFile" ; + rdfs:comment "Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDependencyManifest" ; + rdfs:comment "The `from` Element has manifest files that contain dependency information in each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDistributionArtifact" ; + rdfs:comment "The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDocumentation" ; + rdfs:comment "The `from` Element is documented by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasDynamicLink" ; + rdfs:comment "The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasEvidence" ; + rdfs:comment "Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasExample" ; + rdfs:comment "Every `to` Element is an example for the `from` Element (`from` hasExample `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasHost" ; + rdfs:comment "The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasInput" ; + rdfs:comment "The `from` Build has each `to` Element as an input, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasMetadata" ; + rdfs:comment "Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalComponent" ; + rdfs:comment "Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOptionalDependency" ; + rdfs:comment "The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasOutput" ; + rdfs:comment "The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasPrerequisite" ; + rdfs:comment "The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasProvidedDependency" ; + rdfs:comment "The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasRequirement" ; + rdfs:comment "The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasSpecification" ; + rdfs:comment "Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasStaticLink" ; + rdfs:comment "The `from` Element statically links in each `to` Element, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTest" ; + rdfs:comment "Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasTestCase" ; + rdfs:comment "Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "hasVariant" ; + rdfs:comment "Every `to` Element is a variant the `from` Element (`from` hasVariant `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "invokedBy" ; + rdfs:comment "The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "modifiedBy" ; + rdfs:comment "The `from` Element is modified by each `to` Element."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "other" ; + rdfs:comment "Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "packagedBy" ; + rdfs:comment "Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "patchedBy" ; + rdfs:comment "Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "publishedBy" ; + rdfs:comment "Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "reportedBy" ; + rdfs:comment "Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "republishedBy" ; + rdfs:comment "Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "serializedInArtifact" ; + rdfs:comment "The `from` SpdxDocument can be found in a serialized form in each `to` Artifact."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "testedOn" ; + rdfs:comment "The `from` Element has been tested on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "trainedOn" ; + rdfs:comment "The `from` Element has been trained on the `to` Element(s)."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "underInvestigationFor" ; + rdfs:comment "The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships."@en . + + a owl:NamedIndividual, + ns3:RelationshipType ; + rdfs:label "usesTool" ; + rdfs:comment "The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "deployed" ; + rdfs:comment "in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "development" ; + rdfs:comment "the artifact is in active development and is not considered ready for formal support from the supplier."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "endOfSupport" ; + rdfs:comment "there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "limitedSupport" ; + rdfs:comment "the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noAssertion" ; + rdfs:comment "no assertion about the type of support is made. This is considered the default if no other support type is used."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "noSupport" ; + rdfs:comment "there is no support for the artifact from the supplier, consumer assumes any support obligations."@en . + + a owl:NamedIndividual, + ns3:SupportType ; + rdfs:label "support" ; + rdfs:comment "the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support."@en . + +ns3:annotationType a owl:ObjectProperty ; + rdfs:comment "Describes the type of annotation."@en ; + rdfs:range ns3:AnnotationType . + +ns3:beginIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the beginning of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:builtTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was built."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:completeness a owl:ObjectProperty ; + rdfs:comment "Provides information about the completeness of relationships."@en ; + rdfs:range ns3:RelationshipCompleteness . + +ns3:context a owl:DatatypeProperty ; + rdfs:comment """Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under."""@en ; + rdfs:range xsd:string . + +ns3:created a owl:DatatypeProperty ; + rdfs:comment "Identifies when the Element was originally created."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:createdBy a owl:ObjectProperty ; + rdfs:comment "Identifies who or what created the Element."@en ; + rdfs:range ns3:Agent . + +ns3:createdUsing a owl:ObjectProperty ; + rdfs:comment "Identifies the tooling that was used during the creation of the Element."@en ; + rdfs:range ns3:Tool . + +ns3:creationInfo a owl:ObjectProperty ; + rdfs:comment "Provides information about the creation of the Element."@en ; + rdfs:range ns3:CreationInfo . + +ns3:dataLicense a owl:ObjectProperty ; + rdfs:comment """Provides the license under which the SPDX documentation of the Element can be +used."""@en ; + rdfs:range . + +ns3:definingArtifact a owl:ObjectProperty ; + rdfs:comment """Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element."""@en ; + rdfs:range ns3:Artifact . + +ns3:description a owl:DatatypeProperty ; + rdfs:comment "Provides a detailed description of the Element."@en ; + rdfs:range xsd:string . + +ns3:element a owl:ObjectProperty ; + rdfs:comment "Refers to one or more Elements that are part of an ElementCollection."@en ; + rdfs:range ns3:Element . + +ns3:endIntegerRange a owl:DatatypeProperty ; + rdfs:comment "Defines the end of a range."@en ; + rdfs:range xsd:positiveInteger . + +ns3:endTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is no longer applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:extension a owl:ObjectProperty ; + rdfs:comment "Specifies an Extension characterization of some aspect of an Element."@en ; + rdfs:range . + +ns3:externalIdentifier a owl:ObjectProperty ; + rdfs:comment """Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element."""@en ; + rdfs:range ns3:ExternalIdentifier . + +ns3:externalIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external identifier."@en ; + rdfs:range ns3:ExternalIdentifierType . + +ns3:externalRef a owl:ObjectProperty ; + rdfs:comment """Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element."""@en ; + rdfs:range ns3:ExternalRef . + +ns3:externalRefType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the external reference."@en ; + rdfs:range ns3:ExternalRefType . + +ns3:externalSpdxId a owl:DatatypeProperty ; + rdfs:comment """Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + rdfs:range xsd:anyURI . + +ns3:from a owl:ObjectProperty ; + rdfs:comment "References the Element on the left-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:identifier a owl:DatatypeProperty ; + rdfs:comment "Uniquely identifies an external element."@en ; + rdfs:range xsd:string . + +ns3:identifierLocator a owl:DatatypeProperty ; + rdfs:comment "Provides the location for more information regarding an external identifier."@en ; + rdfs:range xsd:anyURI . + +ns3:import a owl:ObjectProperty ; + rdfs:comment "Provides an ExternalMap of Element identifiers."@en ; + rdfs:range ns3:ExternalMap . + +ns3:issuingAuthority a owl:DatatypeProperty ; + rdfs:comment "An entity that is authorized to issue identification credentials."@en ; + rdfs:range xsd:string . + +ns3:key a owl:DatatypeProperty ; + rdfs:comment "A key used in a generic key-value pair."@en ; + rdfs:range xsd:string . + +ns3:locationHint a owl:DatatypeProperty ; + rdfs:comment "Provides an indication of where to retrieve an external Element."@en ; + rdfs:range xsd:anyURI . + +ns3:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an external reference."@en ; + rdfs:range xsd:string . + +ns3:name a owl:DatatypeProperty ; + rdfs:comment "Identifies the name of an Element as designated by the creator."@en ; + rdfs:range xsd:string . + +ns3:namespace a owl:DatatypeProperty ; + rdfs:comment """Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID."""@en ; + rdfs:range xsd:anyURI . + +ns3:namespaceMap a owl:ObjectProperty ; + rdfs:comment "Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance."@en ; + rdfs:range ns3:NamespaceMap . + +ns3:originatedBy a owl:ObjectProperty ; + rdfs:comment "Identifies from where or whom the Element originally came."@en ; + rdfs:range ns3:Agent . + +ns3:packageVerificationCodeExcludedFile a owl:DatatypeProperty ; + rdfs:comment """The relative file name of a file to be excluded from the +`PackageVerificationCode`."""@en ; + rdfs:range xsd:string . + +ns3:prefix a owl:DatatypeProperty ; + rdfs:comment "A substitute for a URI."@en ; + rdfs:range xsd:string . + +ns3:profileConformance a owl:ObjectProperty ; + rdfs:comment """Describes one a profile which the creator of this ElementCollection intends to +conform to."""@en ; + rdfs:range ns3:ProfileIdentifierType . + +ns3:relationshipType a owl:ObjectProperty ; + rdfs:comment "Information about the relationship between two Elements."@en ; + rdfs:range ns3:RelationshipType . + +ns3:releaseTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time an artifact was released."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:rootElement a owl:ObjectProperty ; + rdfs:comment "This property is used to denote the root Element(s) of a tree of elements contained in a BOM."@en ; + rdfs:range ns3:Element . + +ns3:scope a owl:ObjectProperty ; + rdfs:comment "Capture the scope of information about a specific relationship between elements."@en ; + rdfs:range ns3:LifecycleScopeType . + +ns3:specVersion a owl:DatatypeProperty ; + rdfs:comment """Provides a reference number that can be used to understand how to parse and +interpret an Element."""@en ; + rdfs:range xsd:string . + +ns3:standardName a owl:DatatypeProperty ; + rdfs:comment "The name of a relevant standard that may apply to an artifact."@en ; + rdfs:range xsd:string . + +ns3:startTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time from which an element is applicable / valid."@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:statement a owl:DatatypeProperty ; + rdfs:comment "Commentary on an assertion that an annotator has made."@en ; + rdfs:range xsd:string . + +ns3:subject a owl:ObjectProperty ; + rdfs:comment "An Element an annotator has made an assertion about."@en ; + rdfs:range ns3:Element . + +ns3:summary a owl:DatatypeProperty ; + rdfs:comment "A short description of an Element."@en ; + rdfs:range xsd:string . + +ns3:supportLevel a owl:ObjectProperty ; + rdfs:comment "Specifies the level of support associated with an artifact."@en ; + rdfs:range ns3:SupportType . + +ns3:to a owl:ObjectProperty ; + rdfs:comment "References an Element on the right-hand side of a relationship."@en ; + rdfs:range ns3:Element . + +ns3:validUntilTime a owl:DatatypeProperty ; + rdfs:comment """Specifies until when the artifact can be used before its usage needs to be +reassessed."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns3:value a owl:DatatypeProperty ; + rdfs:comment "A value used in a generic key-value pair."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "amber" ; + rdfs:comment "Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "clear" ; + rdfs:comment "Dataset may be distributed freely, without restriction."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "green" ; + rdfs:comment "Dataset can be shared within a community of peers and partners."@en . + + a owl:NamedIndividual, + ns4:ConfidentialityLevelType ; + rdfs:label "red" ; + rdfs:comment "Data points in the dataset are highly confidential and can only be shared with named recipients."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "clickthrough" ; + rdfs:comment "the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "directDownload" ; + rdfs:comment "the dataset is publicly available and can be downloaded directly."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "query" ; + rdfs:comment "the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "registration" ; + rdfs:comment "the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms."@en . + + a owl:NamedIndividual, + ns4:DatasetAvailabilityType ; + rdfs:label "scrapingScript" ; + rdfs:comment "the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "audio" ; + rdfs:comment "data is audio based, such as a collection of music from the 80s."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "categorical" ; + rdfs:comment "data that is classified into a discrete number of categories, such as the eye color of a population of people."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "graph" ; + rdfs:comment "data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "image" ; + rdfs:comment "data is a collection of images such as pictures of animals."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "noAssertion" ; + rdfs:comment "data type is not known."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "numeric" ; + rdfs:comment "data consists only of numeric entries."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "other" ; + rdfs:comment "data is of a type not included in this list."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "sensor" ; + rdfs:comment "data is recorded from a physical sensor, such as a thermometer reading or biometric device."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "structured" ; + rdfs:comment "data is stored in tabular format or retrieved from a relational database."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "syntactic" ; + rdfs:comment "data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "text" ; + rdfs:comment "data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timeseries" ; + rdfs:comment "data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "timestamp" ; + rdfs:comment "data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends."@en . + + a owl:NamedIndividual, + ns4:DatasetType ; + rdfs:label "video" ; + rdfs:comment "data is video based, such as a collection of movie clips featuring Tom Hanks."@en . + +ns4:anonymizationMethodUsed a owl:DatatypeProperty ; + rdfs:comment "Describes the anonymization methods used."@en ; + rdfs:range xsd:string . + +ns4:confidentialityLevel a owl:ObjectProperty ; + rdfs:comment "Describes the confidentiality level of the data points contained in the dataset."@en ; + rdfs:range ns4:ConfidentialityLevelType . + +ns4:dataCollectionProcess a owl:DatatypeProperty ; + rdfs:comment "Describes how the dataset was collected."@en ; + rdfs:range xsd:string . + +ns4:dataPreprocessing a owl:DatatypeProperty ; + rdfs:comment "Describes the preprocessing steps that were applied to the raw data to create the given dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetAvailability a owl:ObjectProperty ; + rdfs:comment "The field describes the availability of a dataset."@en ; + rdfs:range ns4:DatasetAvailabilityType . + +ns4:datasetNoise a owl:DatatypeProperty ; + rdfs:comment "Describes potentially noisy elements of the dataset."@en ; + rdfs:range xsd:string . + +ns4:datasetSize a owl:DatatypeProperty ; + rdfs:comment "Captures the size of the dataset."@en ; + rdfs:range xsd:nonNegativeInteger . + +ns4:datasetType a owl:ObjectProperty ; + rdfs:comment "Describes the type of the given dataset."@en ; + rdfs:range ns4:DatasetType . + +ns4:datasetUpdateMechanism a owl:DatatypeProperty ; + rdfs:comment "Describes a mechanism to update the dataset."@en ; + rdfs:range xsd:string . + +ns4:hasSensitivePersonalInformation a owl:ObjectProperty ; + rdfs:comment "Describes if any sensitive personal information is present in the dataset."@en ; + rdfs:range ns3:PresenceType . + +ns4:intendedUse a owl:DatatypeProperty ; + rdfs:comment "Describes what the given dataset should be used for."@en ; + rdfs:range xsd:string . + +ns4:knownBias a owl:DatatypeProperty ; + rdfs:comment "Records the biases that the dataset is known to encompass."@en ; + rdfs:range xsd:string . + +ns4:sensor a owl:ObjectProperty ; + rdfs:comment "Describes a sensor used for collecting the data."@en ; + rdfs:range ns3:DictionaryEntry . + +ns7:additionText a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition."@en ; + rdfs:range xsd:string . + +ns7:isDeprecatedAdditionId a owl:DatatypeProperty ; + rdfs:comment "Specifies whether an additional text identifier has been marked as deprecated."@en ; + rdfs:range xsd:boolean . + +ns7:isDeprecatedLicenseId a owl:DatatypeProperty ; + rdfs:comment """Specifies whether a license or additional text identifier has been marked as +deprecated."""@en ; + rdfs:range xsd:boolean . + +ns7:isFsfLibre a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as free by the +Free Software Foundation (FSF)."""@en ; + rdfs:range xsd:boolean . + +ns7:isOsiApproved a owl:DatatypeProperty ; + rdfs:comment """Specifies whether the License is listed as approved by the +Open Source Initiative (OSI)."""@en ; + rdfs:range xsd:boolean . + +ns7:standardAdditionTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a LicenseAddition, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:standardLicenseHeader a owl:DatatypeProperty ; + rdfs:comment """Provides a License author's preferred text to indicate that a file is covered +by the License."""@en ; + rdfs:range xsd:string . + +ns7:standardLicenseTemplate a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License, in SPDX templating format."@en ; + rdfs:range xsd:string . + +ns7:subjectAddition a owl:ObjectProperty ; + rdfs:comment "A LicenseAddition participating in a 'with addition' model."@en ; + rdfs:range ns7:LicenseAddition . + +ns7:subjectExtendableLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in a 'with addition' model."@en ; + rdfs:range ns7:ExtendableLicense . + +ns7:subjectLicense a owl:ObjectProperty ; + rdfs:comment "A License participating in an 'or later' model."@en ; + rdfs:range ns7:License . + + a owl:DatatypeProperty ; + rdfs:comment "A name used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "A value used in a CdxPropertyEntry name-value pair."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment "Provides a map of a property names to a values."@en ; + rdfs:range . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "kev" ; + rdfs:comment "CISA's Known Exploited Vulnerability (KEV) Catalog"@en . + + a owl:NamedIndividual, + ns5:ExploitCatalogType ; + rdfs:label "other" ; + rdfs:comment "Other exploit catalogs"@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "act" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "attend" ; + rdfs:comment "The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "track" ; + rdfs:comment "The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:SsvcDecisionType ; + rdfs:label "trackStar" ; + rdfs:comment "(\"Track\\*\" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\\* vulnerabilities within standard update timelines."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "componentNotPresent" ; + rdfs:comment "The software is not affected because the vulnerable component is not in the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "inlineMitigationsAlreadyExist" ; + rdfs:comment "Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeCannotBeControlledByAdversary" ; + rdfs:comment "The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotInExecutePath" ; + rdfs:comment "The affected code is not reachable through the execution of the code, including non-anticipated states of the product."@en . + + a owl:NamedIndividual, + ns5:VexJustificationType ; + rdfs:label "vulnerableCodeNotPresent" ; + rdfs:comment "The product is not affected because the code underlying the vulnerability is not present in the product."@en . + +ns5:actionStatement a owl:DatatypeProperty ; + rdfs:comment """Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it."""@en ; + rdfs:range xsd:string . + +ns5:actionStatementTime a owl:DatatypeProperty ; + rdfs:comment """Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability."""@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:assessedElement a owl:ObjectProperty ; + rdfs:comment """Specifies an Element contained in a piece of software where a vulnerability was +found."""@en ; + rdfs:range ns3:Element . + +ns5:catalogType a owl:ObjectProperty ; + rdfs:comment "Specifies the exploit catalog type."@en ; + rdfs:range ns5:ExploitCatalogType . + +ns5:decisionType a owl:ObjectProperty ; + rdfs:comment """Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc)."""@en ; + rdfs:range ns5:SsvcDecisionType . + +ns5:exploited a owl:DatatypeProperty ; + rdfs:comment "Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog."@en ; + rdfs:range xsd:boolean . + +ns5:impactStatement a owl:DatatypeProperty ; + rdfs:comment """Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label."""@en ; + rdfs:range xsd:string . + +ns5:impactStatementTime a owl:DatatypeProperty ; + rdfs:comment "Timestamp of impact statement."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:justificationType a owl:ObjectProperty ; + rdfs:comment """Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship."""@en ; + rdfs:range ns5:VexJustificationType . + +ns5:locator a owl:DatatypeProperty ; + rdfs:comment "Provides the location of an exploit catalog."@en ; + rdfs:range xsd:anyURI . + +ns5:percentile a owl:DatatypeProperty ; + rdfs:comment "The percentile of the current probability score."@en ; + rdfs:range xsd:decimal . + +ns5:probability a owl:DatatypeProperty ; + rdfs:comment "A probability score between 0 and 1 of a vulnerability being exploited."@en ; + rdfs:range xsd:decimal . + +ns5:statusNotes a owl:DatatypeProperty ; + rdfs:comment "Conveys information about how VEX status was determined."@en ; + rdfs:range xsd:string . + +ns5:vexVersion a owl:DatatypeProperty ; + rdfs:comment "Specifies the version of a VEX statement."@en ; + rdfs:range xsd:string . + + a owl:ObjectProperty ; + rdfs:comment """Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID."""@en ; + rdfs:range ns3:DictionaryEntry . + + a owl:DatatypeProperty ; + rdfs:comment "A string in the license expression format."@en ; + rdfs:range xsd:string . + + a owl:DatatypeProperty ; + rdfs:comment "The version of the SPDX License List used in the license expression."@en ; + rdfs:range xsd:string . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "gitoid" ; + rdfs:comment "[Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg)."@en . + + a owl:NamedIndividual, + ns6:ContentIdentifierType ; + rdfs:label "swhid" ; + rdfs:comment "SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "directory" ; + rdfs:comment "The file represents a directory and all content stored in that directory."@en . + + a owl:NamedIndividual, + ns6:FileKindType ; + rdfs:label "file" ; + rdfs:comment "The file represents a single file (default)."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "analyzed" ; + rdfs:comment "SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a \"3rd party\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "build" ; + rdfs:comment "SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "deployed" ; + rdfs:comment "SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "design" ; + rdfs:comment "SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "runtime" ; + rdfs:comment "SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an \"Instrumented\" or \"Dynamic\" SBOM."@en . + + a owl:NamedIndividual, + ns6:SbomType ; + rdfs:label "source" ; + rdfs:comment "SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact."@en . + +ns6:additionalPurpose a owl:ObjectProperty ; + rdfs:comment "Provides additional purpose information of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:attributionText a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet."""@en ; + rdfs:range xsd:string . + +ns6:byteRange a owl:DatatypeProperty ; + rdfs:comment """Defines the byte range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:contentIdentifier a owl:DatatypeProperty ; + rdfs:comment """A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity."""@en ; + rdfs:range ns6:ContentIdentifier . + +ns6:contentIdentifierType a owl:ObjectProperty ; + rdfs:comment "Specifies the type of the content identifier."@en ; + rdfs:range ns6:ContentIdentifierType . + +ns6:contentIdentifierValue a owl:DatatypeProperty ; + rdfs:comment "Specifies the value of the content identifier."@en ; + rdfs:range xsd:anyURI . + +ns6:copyrightText a owl:DatatypeProperty ; + rdfs:comment """Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any."""@en ; + rdfs:range xsd:string . + +ns6:downloadLocation a owl:DatatypeProperty ; + rdfs:comment """Identifies the download Uniform Resource Identifier for the package at the time +that the document was created."""@en ; + rdfs:range xsd:anyURI . + +ns6:fileKind a owl:ObjectProperty ; + rdfs:comment "Describes if a given file is a directory or non-directory kind of file."@en ; + rdfs:range ns6:FileKindType . + +ns6:homePage a owl:DatatypeProperty ; + rdfs:comment """A place for the SPDX document creator to record a website that serves as the +package's home page."""@en ; + rdfs:range xsd:anyURI . + +ns6:lineRange a owl:DatatypeProperty ; + rdfs:comment """Defines the line range in the original host file that the snippet information +applies to."""@en ; + rdfs:range ns3:PositiveIntegerRange . + +ns6:packageUrl a owl:DatatypeProperty ; + rdfs:comment """Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package."""@en ; + rdfs:range xsd:anyURI . + +ns6:packageVersion a owl:DatatypeProperty ; + rdfs:comment "Identify the version of a package."@en ; + rdfs:range xsd:string . + +ns6:primaryPurpose a owl:ObjectProperty ; + rdfs:comment "Provides information about the primary purpose of the software artifact."@en ; + rdfs:range ns6:SoftwarePurpose . + +ns6:sbomType a owl:ObjectProperty ; + rdfs:comment "Provides information about the type of an SBOM."@en ; + rdfs:range ns6:SbomType . + +ns6:snippetFromFile a owl:ObjectProperty ; + rdfs:comment "Defines the original host file that the snippet information applies to."@en ; + rdfs:range ns6:File . + +ns6:sourceInfo a owl:DatatypeProperty ; + rdfs:comment """Records any relevant background information or additional comments +about the origin of the package."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumption a owl:Class, + sh:NodeShape ; + rdfs:comment """A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:inferenceEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:finetuningEnergyConsumption ], + [ sh:class ns2:EnergyConsumptionDescription ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns2:trainingEnergyConsumption ] . + +ns3:CreationInfo a owl:Class, + sh:NodeShape ; + rdfs:comment "Provides information about the creation of the Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:created ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:Tool ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdUsing ], + [ sh:class ns3:Agent ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:createdBy ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:specVersion ; + sh:pattern "^(0|[1-9]\\d*)\\.(0|[1-9]\\d*)\\.(0|[1-9]\\d*)(?:-((?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\\.(?:0|[1-9]\\d*|\\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\\+([0-9a-zA-Z-]+(?:\\.[0-9a-zA-Z-]+)*))?$" ] . + +ns3:ElementCollection a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A collection of Elements, not necessarily with unifying context."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:ProfileIdentifierType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:profileConformance ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:rootElement ], + [ sh:class ns3:Element ; + sh:nodeKind sh:IRI ; + sh:path ns3:element ] . + +ns3:ExternalIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifierLocator ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:issuingAuthority ], + [ sh:class ns3:ExternalIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalIdentifierType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:identifier ] . + +ns3:ExternalMap a owl:Class, + sh:NodeShape ; + rdfs:comment """A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:locationHint ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:externalSpdxId ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:class ns3:Artifact ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:definingArtifact ] . + +ns3:ExternalRef a owl:Class, + sh:NodeShape ; + rdfs:comment "A reference to a resource outside the scope of SPDX-3.0 content related to an Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ], + [ sh:class ns3:ExternalRefType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:externalRefType ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:locator ] . + +ns3:Hash a owl:Class, + sh:NodeShape ; + rdfs:comment "A mathematically calculated representation of a grouping of data."@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:hashValue ], + [ sh:class ns3:HashAlgorithm ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:algorithm ] . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "adler32" ; + rdfs:comment "Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b256" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b384" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake2b512" ; + rdfs:comment "BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "blake3" ; + rdfs:comment "[BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsDilithium" ; + rdfs:comment "[Dilithium](https://pq-crystals.org/dilithium/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "crystalsKyber" ; + rdfs:comment "[Kyber](https://pq-crystals.org/kyber/)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "falcon" ; + rdfs:comment "[FALCON](https://falcon-sign.info/falcon.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md2" ; + rdfs:comment "MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md4" ; + rdfs:comment "MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md5" ; + rdfs:comment "MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "md6" ; + rdfs:comment "[MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf)"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "other" ; + rdfs:comment "any hashing algorithm that does not exist in this list of entries"@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha1" ; + rdfs:comment "SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha224" ; + rdfs:comment "SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha256" ; + rdfs:comment "SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha384" ; + rdfs:comment "SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_224" ; + rdfs:comment "SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_256" ; + rdfs:comment "SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_384" ; + rdfs:comment "SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha3_512" ; + rdfs:comment "SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final)."@en . + + a owl:NamedIndividual, + ns3:HashAlgorithm ; + rdfs:label "sha512" ; + rdfs:comment "SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/)."@en . + +ns3:NamespaceMap a owl:Class, + sh:NodeShape ; + rdfs:comment "A mapping between prefixes and namespace partial URIs."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:prefix ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:namespace ] . + +ns3:Relationship a owl:Class, + sh:NodeShape ; + rdfs:comment "Describes a relationship between one or more elements."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Element ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:to ], + [ sh:class ns3:RelationshipCompleteness ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:completeness ], + [ sh:class ns3:RelationshipType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:relationshipType ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:startTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:from ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:Tool a owl:Class ; + rdfs:comment "An element of hardware and/or software utilized to carry out a particular function."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns3:algorithm a owl:ObjectProperty ; + rdfs:comment "Specifies the algorithm used for calculating the hash value."@en ; + rdfs:range ns3:HashAlgorithm . + +ns3:hashValue a owl:DatatypeProperty ; + rdfs:comment "The result of applying a hash algorithm to an Element."@en ; + rdfs:range xsd:string . + +ns3:suppliedBy a owl:ObjectProperty ; + rdfs:comment """Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element."""@en ; + rdfs:range ns3:Agent . + +ns3:verifiedUsing a owl:ObjectProperty ; + rdfs:comment """Provides an IntegrityMethod with which the integrity of an Element can be +asserted."""@en ; + rdfs:range ns3:IntegrityMethod . + +ns7:IndividualLicensingInfo a owl:Class ; + rdfs:comment """A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile."""@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:deprecatedVersion a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this license or exception +identifier was deprecated."""@en ; + rdfs:range xsd:string . + +ns7:licenseXml a owl:DatatypeProperty ; + rdfs:comment """Identifies all the text and metadata associated with a license in the license +XML format."""@en ; + rdfs:range xsd:string . + +ns7:listVersionAdded a owl:DatatypeProperty ; + rdfs:comment """Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added."""@en ; + rdfs:range xsd:string . + +ns7:member a owl:ObjectProperty ; + rdfs:comment "A license expression participating in a license set."@en ; + rdfs:range . + +ns7:obsoletedBy a owl:DatatypeProperty ; + rdfs:comment """Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition."""@en ; + rdfs:range xsd:string . + +ns7:seeAlso a owl:DatatypeProperty ; + rdfs:comment "Contains a URL where the License or LicenseAddition can be found in use."@en ; + rdfs:range xsd:anyURI . + + a owl:Class, + sh:NodeShape ; + rdfs:comment "A property name with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ] . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "critical" ; + rdfs:comment "When a CVSS score is between 9.0 - 10.0"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "high" ; + rdfs:comment "When a CVSS score is between 7.0 - 8.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "low" ; + rdfs:comment "When a CVSS score is between 0.1 - 3.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "medium" ; + rdfs:comment "When a CVSS score is between 4.0 - 6.9"@en . + + a owl:NamedIndividual, + ns5:CvssSeverityType ; + rdfs:label "none" ; + rdfs:comment "When a CVSS score is 0.0"@en . + +ns5:modifiedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies a time when a vulnerability assessment was modified"@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:publishedTime a owl:DatatypeProperty ; + rdfs:comment "Specifies the time when a vulnerability was published."@en ; + rdfs:range xsd:dateTimeStamp . + +ns5:severity a owl:ObjectProperty ; + rdfs:comment "Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software."@en ; + rdfs:range ns5:CvssSeverityType . + +ns5:withdrawnTime a owl:DatatypeProperty ; + rdfs:comment "Specified the time and date when a vulnerability was withdrawn."@en ; + rdfs:range xsd:dateTimeStamp . + + a owl:DatatypeProperty ; + rdfs:comment "Identifies the full text of a License or Addition."@en ; + rdfs:range xsd:string . + +ns6:ContentIdentifier a owl:Class, + sh:NodeShape ; + rdfs:comment "A canonical, unique, immutable identifier"@en ; + rdfs:subClassOf ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns6:ContentIdentifierType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:contentIdentifierType ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:contentIdentifierValue ] . + +ns6:File a owl:Class, + sh:NodeShape ; + rdfs:comment "Refers to any object that stores content on a computer."@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:FileKindType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:fileKind ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:contentType ; + sh:pattern "^[^\\/]+\\/[^\\/]+$" ] . + +ns6:Package a owl:Class, + sh:NodeShape ; + rdfs:comment """Refers to any unit of content that can be associated with a distribution of +software."""@en ; + rdfs:subClassOf ns6:SoftwareArtifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageUrl ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:homePage ], + [ sh:datatype xsd:anyURI ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:downloadLocation ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:sourceInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:packageVersion ] . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "application" ; + rdfs:comment "The Element is a software application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "archive" ; + rdfs:comment "The Element is an archived collection of one or more files (.tar, .zip, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "bom" ; + rdfs:comment "The Element is a bill of materials."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "configuration" ; + rdfs:comment "The Element is configuration data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "container" ; + rdfs:comment "The Element is a container image which can be used by a container runtime application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "data" ; + rdfs:comment "The Element is data."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "device" ; + rdfs:comment "The Element refers to a chipset, processor, or electronic board."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "deviceDriver" ; + rdfs:comment "The Element represents software that controls hardware devices."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "diskImage" ; + rdfs:comment "The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "documentation" ; + rdfs:comment "The Element is documentation."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "evidence" ; + rdfs:comment "The Element is the evidence that a specification or requirement has been fulfilled."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "executable" ; + rdfs:comment "The Element is an Artifact that can be run on a computer."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "file" ; + rdfs:comment "The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.)."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "filesystemImage" ; + rdfs:comment "The Element is a file system image that can be written to a disk (or virtual) partition."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "firmware" ; + rdfs:comment "The Element provides low level control over a device's hardware."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "framework" ; + rdfs:comment "The Element is a software framework."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "install" ; + rdfs:comment "The Element is used to install software on disk."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "library" ; + rdfs:comment "The Element is a software library."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "manifest" ; + rdfs:comment "The Element is a software manifest."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "model" ; + rdfs:comment "The Element is a machine learning or artificial intelligence model."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "module" ; + rdfs:comment "The Element is a module of a piece of software."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "operatingSystem" ; + rdfs:comment "The Element is an operating system."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "other" ; + rdfs:comment "The Element doesn't fit into any of the other categories."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "patch" ; + rdfs:comment "The Element contains a set of changes to update, fix, or improve another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "platform" ; + rdfs:comment "The Element represents a runtime environment."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "requirement" ; + rdfs:comment "The Element provides a requirement needed as input for another Element."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "source" ; + rdfs:comment "The Element is a single or a collection of source files."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "specification" ; + rdfs:comment "The Element is a plan, guideline or strategy how to create, perform or analyze an application."@en . + + a owl:NamedIndividual, + ns6:SoftwarePurpose ; + rdfs:label "test" ; + rdfs:comment "The Element is a test used to verify functionality on an software element."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "no" ; + rdfs:comment "Indicates absence of the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "noAssertion" ; + rdfs:comment "Makes no assertion about the field."@en . + + a owl:NamedIndividual, + ns3:PresenceType ; + rdfs:label "yes" ; + rdfs:comment "Indicates presence of the field."@en . + +ns3:contentType a owl:DatatypeProperty ; + rdfs:comment "Provides information about the content type of an Element or a Property."@en ; + rdfs:range xsd:string . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "A characterization of some aspect of an Element that is associated with the Element in a generalized fashion."@en ; + sh:nodeKind sh:BlankNode . + +ns5:score a owl:DatatypeProperty ; + rdfs:comment "Provides a numerical (0-10) representation of the severity of a vulnerability."@en ; + rdfs:range xsd:decimal . + +ns5:vectorString a owl:DatatypeProperty ; + rdfs:comment "Specifies the CVSS vector string for a vulnerability."@en ; + rdfs:range xsd:string . + +ns6:SoftwareArtifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit related to Software."@en ; + rdfs:subClassOf ns3:Artifact ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns6:additionalPurpose ], + [ sh:class ns6:SoftwarePurpose ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns6:primaryPurpose ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns6:copyrightText ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns6:attributionText ], + [ sh:class ns6:ContentIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns6:contentIdentifier ] . + +ns3:AnnotationType a owl:Class ; + rdfs:comment "Specifies the type of an annotation."@en . + +ns3:Artifact a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "A distinct article or unit within the digital domain."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:SupportType ; + sh:in ( ) ; + sh:nodeKind sh:IRI ; + sh:path ns3:supportLevel ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:validUntilTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:string ; + sh:nodeKind sh:Literal ; + sh:path ns3:standardName ], + [ sh:class ns3:Agent ; + sh:nodeKind sh:IRI ; + sh:path ns3:originatedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:releaseTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:builtTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ] . + +ns3:PositiveIntegerRange a owl:Class, + sh:NodeShape ; + rdfs:comment "A tuple of two positive integers that define a range."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:endIntegerRange ], + [ sh:datatype xsd:positiveInteger ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:beginIntegerRange ] . + +ns7:ExtendableLicense a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a License or an OrLaterOperator."@en ; + rdfs:subClassOf ; + sh:nodeKind sh:IRI . + +ns7:License a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract class for the portion of an AnyLicenseInfo representing a license."@en ; + rdfs:subClassOf ns7:ExtendableLicense ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseHeader ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardLicenseTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isFsfLibre ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedLicenseId ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isOsiApproved ] . + +ns7:LicenseAddition a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment """Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License."""@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:additionText ], + [ sh:datatype xsd:anyURI ; + sh:nodeKind sh:Literal ; + sh:path ns7:seeAlso ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:standardAdditionTemplate ], + [ sh:datatype xsd:boolean ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:isDeprecatedAdditionId ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:licenseXml ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns7:obsoletedBy ] . + +ns5:ExploitCatalogType a owl:Class ; + rdfs:comment "Specifies the exploit catalog type."@en . + +ns5:VexVulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all VEX relationships"@en ; + rdfs:subClassOf ns5:VulnAssessmentRelationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:statusNotes ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:vexVersion ] . + +ns6:ContentIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of a content identifier."@en . + +ns6:FileKindType a owl:Class ; + rdfs:comment "Enumeration of the different kinds of SPDX file."@en . + +ns2:EnergyUnitType a owl:Class ; + rdfs:comment "Specifies the unit of energy consumption."@en . + +ns3:RelationshipCompleteness a owl:Class ; + rdfs:comment "Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness."@en . + +ns3:comment a owl:DatatypeProperty ; + rdfs:comment """Provide consumers with comments by the creator of the Element about the +Element."""@en ; + rdfs:range xsd:string . + +ns2:EnergyConsumptionDescription a owl:Class, + sh:NodeShape ; + rdfs:comment """The class that helps note down the quantity of energy consumption and the unit +used for measurement."""@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:class ns2:EnergyUnitType ; + sh:in ( ) ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns2:energyUnit ], + [ sh:datatype xsd:decimal ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns2:energyQuantity ] . + +ns2:SafetyRiskAssessmentType a owl:Class ; + rdfs:comment "Specifies the safety risk level."@en . + +ns3:IntegrityMethod a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Provides an independently reproducible mechanism that permits verification of a specific Element."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ] . + +ns4:ConfidentialityLevelType a owl:Class ; + rdfs:comment "Categories of confidentiality level."@en . + +ns5:SsvcDecisionType a owl:Class ; + rdfs:comment "Specifies the SSVC decision type."@en . + +ns4:DatasetAvailabilityType a owl:Class ; + rdfs:comment "Availability of dataset."@en . + +ns5:VexJustificationType a owl:Class ; + rdfs:comment "Specifies the VEX justification type."@en . + +ns5:VulnAssessmentRelationship a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Abstract ancestor class for all vulnerability assessments"@en ; + rdfs:subClassOf ns3:Relationship ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ns3:Agent ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns3:suppliedBy ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:modifiedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:withdrawnTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ], + [ sh:class ns3:Element ; + sh:maxCount 1 ; + sh:nodeKind sh:IRI ; + sh:path ns5:assessedElement ], + [ sh:datatype xsd:dateTimeStamp ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns5:publishedTime ; + sh:pattern "^\\d\\d\\d\\d-\\d\\d-\\d\\dT\\d\\d:\\d\\d:\\d\\dZ$" ] . + +ns3:LifecycleScopeType a owl:Class ; + rdfs:comment "Provide an enumerated set of lifecycle phases that can provide context to relationships."@en . + +ns5:CvssSeverityType a owl:Class ; + rdfs:comment "Specifies the CVSS base, temporal, threat, or environmental severity type."@en . + +ns6:SbomType a owl:Class ; + rdfs:comment """Provides a set of values to be used to describe the common types of SBOMs that +tools may create."""@en . + +ns3:PresenceType a owl:Class ; + rdfs:comment "Categories of presence or absence."@en . + +ns3:SupportType a owl:Class ; + rdfs:comment "Indicates the type of support that is associated with an artifact."@en . + +ns3:Agent a owl:Class ; + rdfs:comment "Agent represents anything with the potential to act on a system."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + + a ns1:AbstractClass, + owl:Class ; + rdfs:comment "Abstract class representing a license combination consisting of one or more licenses."@en ; + rdfs:subClassOf ns3:Element ; + sh:nodeKind sh:IRI . + +ns1:AbstractClass a owl:Class . + +ns3:ProfileIdentifierType a owl:Class ; + rdfs:comment "Enumeration of the valid profiles."@en . + +ns3:ExternalIdentifierType a owl:Class ; + rdfs:comment "Specifies the type of an external identifier."@en . + +ns3:DictionaryEntry a owl:Class, + sh:NodeShape ; + rdfs:comment "A key with an associated value."@en ; + sh:nodeKind sh:BlankNode ; + sh:property [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:key ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:value ] . + +ns4:DatasetType a owl:Class ; + rdfs:comment "Enumeration of dataset types."@en . + +ns3:Element a ns1:AbstractClass, + owl:Class, + sh:NodeShape ; + rdfs:comment "Base domain class from which all other SPDX-3.0 domain classes derive."@en ; + sh:nodeKind sh:IRI ; + sh:property [ sh:class ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:extension ], + [ sh:class ns3:CreationInfo ; + sh:maxCount 1 ; + sh:minCount 1 ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:creationInfo ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:description ], + [ sh:class ns3:IntegrityMethod ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:verifiedUsing ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:comment ], + [ sh:class ns3:ExternalIdentifier ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalIdentifier ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:summary ], + [ sh:datatype xsd:string ; + sh:maxCount 1 ; + sh:nodeKind sh:Literal ; + sh:path ns3:name ], + [ sh:class ns3:ExternalRef ; + sh:nodeKind sh:BlankNodeOrIRI ; + sh:path ns3:externalRef ] . + +ns3:HashAlgorithm a owl:Class ; + rdfs:comment "A mathematical algorithm that maps data of arbitrary size to a bit string."@en . + +ns6:SoftwarePurpose a owl:Class ; + rdfs:comment "Provides information about the primary purpose of an Element."@en . + +ns3:ExternalRefType a owl:Class ; + rdfs:comment "Specifies the type of an external reference."@en . + +ns3:RelationshipType a owl:Class ; + rdfs:comment "Information about the relationship between two Elements."@en . + diff --git a/v3.0/rdf/spdx-model.xml b/v3.0/rdf/spdx-model.xml new file mode 100644 index 0000000000..95985a3159 --- /dev/null +++ b/v3.0/rdf/spdx-model.xml @@ -0,0 +1,5586 @@ + + + + + A concrete subclass of AnyLicenseInfo used by Individuals in the +ExpandedLicensing profile. + + + + + + + + + + + + 1 + 1 + + + Represents the energy quantity. + + + + + + + + + + + + + + + + + republishedBy + Designates a `from` Vulnerability's details were tracked, aggregated, and/or enriched to improve context (i.e. NVD) by each `to` Agent. + + + + + Refers to any unit of content that can be associated with a distribution of +software. + + + + + + + + + + + + + 1 + 1 + + + Specifies the SPDX License List version in which this ListedLicense or +ListedLicenseException identifier was first added. + + + + + Identify the version of a package. + + + + + + + A class for describing the energy consumption incurred by an AI model in +different stages of its lifecycle. + + + + + + + + + A collection of Elements that have a shared context. + + + + + + + + A property name with an associated value. + + + + + + Captures the size of the dataset. + + + + + + + runtimeAnalysisReport + A reference to a runtime analysis report for a package. + + + + + + + + + + + + + + + + + A collection of SPDX Elements that could potentially be serialized. + + + + + + + + + + + + + + + + + + + falcon + [FALCON](https://falcon-sign.info/falcon.pdf) + + + + + + + Provides the location for more information regarding an external identifier. + + + + + Defines the byte range in the original host file that the snippet information +applies to. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + license + A reference to additional license information related to an artifact. + + + + + none + When a CVSS score is 0.0 + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + socialMedia + A reference to a social media channel for a package. + + + + + + + + + + + + + A reference to a resource outside the scope of SPDX-3.0 content related to an Element. + + + + + + + + + + critical + When a CVSS score is between 9.0 - 10.0 + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + Captures a standard that is being complied with. + + + + + + + vulnerabilityDisclosureReport + A reference to a Vulnerability Disclosure Report (VDR) which provides the software supplier's analysis and findings describing the impact (or lack of impact) that reported vulnerabilities have on packages or products in the supplier's SBOM as defined in [NIST SP 800-161 Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations](https://csrc.nist.gov/pubs/sp/800/161/r1/final). + + + + + blake2b384 + BLAKE2b algorithm with a digest size of 384, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + Abstract class for the portion of an AnyLicenseInfo representing a license. + + + + + + + + + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 4 assessment for a vulnerability. + + + + + + + + + + + + + + Connects a vulnerability and an element designating the element as a product +affected by the vulnerability. + + + + + + + + + + + + + + + 1 + + + + + + + + + + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + 1 + + + + + + + 1 + 1 + + + + + A license that is listed on the SPDX License List. + + + + + + + + + + + Specified the time and date when a vulnerability was withdrawn. + + + + + + + attend + The vulnerability requires attention from the organization's internal, supervisory-level individuals. Necessary actions include requesting assistance or information about the vulnerability, and may involve publishing a notification either internally and/or externally. CISA recommends remediating Attend vulnerabilities sooner than standard update timelines. + + + + + + + + + requirement + The Element provides a requirement needed as input for another Element. + + + + Specifies the CVSS base, temporal, threat, or environmental severity type. + + + + + other + any hashing algorithm that does not exist in this list of entries + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Provides additional purpose information of the software artifact. + + + + + + + A license exception that is listed on the SPDX Exceptions list. + + + + + + + Records the type of the model used in the AI software. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + + + + + A type of extension consisting of a list of name value pairs. + + + + + + Provides a detailed description of the Element. + + + + + + + + 1 + + + + + + + + + coordinatedBy + The `from` Vulnerability is coordinatedBy the `to` Agent(s) (vendor, researcher, or consumer agent). + + + + + exportControlAssessment + A reference to a export control assessment for a package. + + + + + + + Specifies the time an artifact was built. + + + + + + + + + + Defines the original host file that the snippet information applies to. + + + + + + + + + + + + 1 + + + + + + + Impact justification label to be used when linking a vulnerability to an element +representing a VEX product with a VexNotAffectedVulnAssessmentRelationship +relationship. + + + + + + + An SPDX Element containing an SPDX license expression string. + + + + + + + + Describes how the dataset was collected. + + + + + Specifies the amount of energy consumed during inference time by an AI model +that is being used in the AI system. + + + + + + + + 1 + 1 + + + + + + + + + + securityAdversaryModel + A reference to the security adversary model for a package. + + + + + A mapping between prefixes and namespace partial URIs. + + + + + + + + expandsTo + The `from` archive expands out as an artifact described by each `to` Element. + + + + + + + 1 + 1 + + + + + + + + + A mathematically calculated representation of a grouping of data. + + + + + + + + + hasDeclaredLicense + The `from` SoftwareArtifact was discovered to actually contain each `to` license, for example as detected by use of automated tooling. + + + + + hasStaticLink + The `from` Element statically links in each `to` Element, during a LifecycleScopeType period. + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + 1 + + + Indicates whether the system can perform a decision or action without human +involvement or guidance. + + + + + + + Describes a relationship between one or more elements. + + + + + + + + + + + + + componentNotPresent + The software is not affected because the vulnerable component is not in the product. + + + + + + + + + specification + The Element is a plan, guideline or strategy how to create, perform or analyze an application. + + + + + + + + A value used in a generic key-value pair. + + + + + + + + + 1 + 1 + + + + + Provides a CVSS version 3 assessment for a vulnerability. + + + + + + + + + + documentation + A reference to the documentation for a package. + + + + + + + + + + + + + securityOther + Used when there is a security related identifier of unspecified type. + + + + + certificationReport + A reference to a certification report for a package from an accredited/independent body. + + + + + nuget + A reference to a NuGet package. The package locator format is defined in the [NuGet documentation](https://docs.nuget.org) and looks like `package/version`. + + + + + + + Records a hyperparameter used to build the AI model contained in the AI +package. + + + + + + + + + Specifies an Extension characterization of some aspect of an Element. + + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + Enumeration of dataset types. + + + + + sensor + data is recorded from a physical sensor, such as a thermometer reading or biometric device. + + + + + + A distinct article or unit within the digital domain. + + + + + + + + + + + + + An individual human being. + + + + + + + The class that helps note down the quantity of energy consumption and the unit +used for measurement. + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + + + support + A reference to the software support channel or other support information for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + test + The Element is a test used to verify functionality on an software element. + + + Specifies whether a license or additional text identifier has been marked as +deprecated. + + + + + + + + + + + + doesNotAffect + The `from` Vulnerability has no impact on each `to` Element. The use of the `doesNotAffect` is constrained to `VexNotAffectedVulnAssessmentRelationship` classed relationships. + + + + + + + 1 + 1 + + + Specifies whether the License is listed as approved by the +Open Source Initiative (OSI). + + + + + + Specifies the SSVC decision type. + + + + + blake2b512 + BLAKE2b algorithm with a digest size of 512, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + + + + + + + + + + + + + + + + + bower + A reference to a Bower package. The package locator format, looks like `package#version`, is defined in the "install" section of [Bower API documentation](https://bower.io/docs/api/#install). + + + + + + + A key used in a generic key-value pair. + + + + + + + platform + The Element represents a runtime environment. + + + + + + + 1 + 1 + + + + + hasDistributionArtifact + The `from` Element is distributed as an artifact in each `to` Element (e.g. an RPM or archive file). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + A collection of Elements, not necessarily with unifying context. + + + + + + + + + + hasVariant + Every `to` Element is a variant the `from` Element (`from` hasVariant `to`). + + + + + + 1 + + + + + + + 1 + + + + + usesTool + The `from` Element uses each `to` Element as a tool, during a LifecycleScopeType period. + + + + + + + + + contains + The `from` Element contains each `to` Element. + + + + + securityAdvisory + A reference to a published security advisory (where advisory as defined per [ISO 29147:2018](https://www.iso.org/standard/72311.html)) that may affect one or more elements, e.g., vendor advisories or specific NVD entries. + + + + + + + 1 + + + + + + + + + + 1 + 1 + + + + + + + + + + + + + + Provides an exploit assessment of a vulnerability. + + + + + + + + + + productMetadata + A reference to additional product metadata such as reference within organization's product catalog. + + + + + + + + + + 1 + 1 + + + + + other + Used when the type does not match any of the other options. + + + + + hasPrerequisite + The `from` Element has a prerequisite on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + + + + A group of people who work together in an organized way for a shared purpose. + + + + + + + incomplete + The relationship is known not to be exhaustive. + + + + + software + the element follows the Software profile specification + + + + + buildMeta + A reference build metadata related to a published package. + + + + + + + + + + + + + + + 1 + 1 + + + Identifies the full text of a License, in SPDX templating format. + + + + + + + timestamp + data is recorded with a timestamp for each entry, but not necessarily ordered or at specific intervals, such as when a taxi ride starts and ends. + + + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information where +only one of the elements applies. + + + + + + Identifies the full text of a License or Addition. + + + + + + + securityPenTestReport + A reference to a [penetration test](https://en.wikipedia.org/wiki/Penetration_test) report for a package. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + generates + The `from` Element generates each `to` Element. + + + + + + Abstract class for additional text intended to be added to a License, but +which is not itself a standalone License. + + + + + + + + + + + A name used in a CdxPropertyEntry name-value pair. + + + + + Specifies the time from which an element is no longer applicable / valid. + + + + + + + + + + + image + data is a collection of images such as pictures of animals. + + + + + + + + + + + + + + A distinct article or unit related to Software. + + + + + + + + + + + + + + Provides advise on how to mitigate or remediate a vulnerability when a VEX product +is affected by it. + + + + + + + + + + + hasDynamicLink + The `from` Element dynamically links in each `to` Element, during a LifecycleScopeType period. + + + + + + Base domain class from which all other SPDX-3.0 domain classes derive. + + + + + + + + + + + + + + + evidence + The Element is the evidence that a specification or requirement has been fulfilled. + + + + + hasMetadata + Every `to` Element is metadata about the `from` Element (`from` hasMetadata `to`). + + + + + high + When a CVSS score is between 7.0 - 8.9 + + + + + Specifies a data package and its associated information. + + + + + + + + + + + + + + + + + + + + sha256 + SHA-2 with a digest length of 256, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + Specifies the type of an external reference. + + + + + syntactic + data describes the syntax or semantics of a language or text, such as a parse tree used for natural language processing. + + + + + vcs + A reference to a version control system related to a software artifact. + + + + + exploitCreatedBy + The `from` Vulnerability has had an exploit created against it by each `to` Agent. + + + + Information about the relationship between two Elements. + + + + + md5 + MD5 message-digest algorithm, as defined in [RFC 1321](https://datatracker.ietf.org/doc/rfc1321/). + + + + + + 1 + 1 + + + + + + 1 + + + + + descendantOf + The `from` Element is a descendant of each `to` Element. + + + + + + + A string in the license expression format. + + + + + + + email + Email address, as defined in [RFC 3696](https://datatracker.ietf.org/doc/rfc3986/) Section 3. + + + + + + + + + securityPolicy + A reference to instructions for reporting newly discovered security vulnerabilities for a package. + + + Indicates the amount of energy consumption incurred by an AI model. + + + + + + + blake2b256 + BLAKE2b algorithm with a digest size of 256, as defined in [RFC 7693](https://datatracker.ietf.org/doc/rfc7693/) Section 4. + + + + + funding + A reference to funding information related to a package. + + + + + + + + + Provides a CVSS version 2.0 assessment for a vulnerability. + + + + + + + + + + + + + delegatedTo + The `from` Agent is delegating an action to the Agent of the `to` Relationship (which must be of type invokedBy), during a LifecycleScopeType (e.g. the `to` invokedBy Relationship is being done on behalf of `from`). + + + + + + + Capture the scope of information about a specific relationship between elements. + + + + + Points to a resource outside the scope of the SPDX-3.0 content +that provides additional characteristics of an Element. + + + + + + + + + Describes the confidentiality level of the data points contained in the dataset. + + + + + + + serializedInArtifact + The `from` SpdxDocument can be found in a serialized form in each `to` Artifact. + + + + + + + 1 + + + + + securityFix + A reference to the patch or source code that fixes a vulnerability. + + + + + diskImage + The Element refers to a disk image that can be written to a disk, booted in a VM, etc. A disk image typically contains most or all of the components necessary to boot, such as bootloaders, kernels, firmware, userspace, etc. + + + Describes the type of the given dataset. + + + + + + + + Abstract ancestor class for all vulnerability assessments + + + + + + + + + + + + + + + + noAssertion + data type is not known. + + + + + + + 1 + + + + + Refers to any object that stores content on a computer. + + + + + + + + + + + + + medium + When a CVSS score is between 4.0 - 6.9 + + + + + + 1 + + + + + + + 1 + + + + + + 1 + + + Specifies a time when a vulnerability assessment was modified + + + + + Describes methods that can be used to explain the results from the AI model. + + + + + Specifies the licenseId that is preferred to be used in place of a deprecated +License or LicenseAddition. + + + + + + + + + + + modifiedBy + The `from` Element is modified by each `to` Element. + + + + + + + + + Portion of an AnyLicenseInfo representing this version, or any later version, +of the indicated License. + + + + + + + + + 1 + 1 + + + + + An SPDX version 2.X compatible verification method for software packages. + + + + + + + + + + fixedBy + Designates a `from` Vulnerability has been fixed by the `to` Agent(s). + + + + + limitedSupport + the artifact has been released, and there is limited support available from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + + + + + + + + + + + privacyAssessment + A reference to a privacy assessment for a package. + + + + + reportedBy + Designates a `from` Vulnerability was first reported to a project, vendor, or tracking database for formal identification by each `to` Agent. + + + + + other + Used to store extra information about an Element which is not part of a review (e.g. extra information provided during the creation of the Element). + + + Provides information about the primary purpose of the software artifact. + + + + + + + + + + + + + + + Abstract class representing a license combination consisting of one or more licenses. + + + + + + + + + + + audio + data is audio based, such as a collection of music from the 80s. + + + Provides the license under which the SPDX documentation of the Element can be +used. + + + + + Provides information about the content type of an Element or a Property. + + + + + + + other + A relationship has other specific context information necessary to capture that the above set of enumerations does not handle. + + + + + sha1 + SHA-1, a secure hashing algorithm, as defined in [RFC 3174](https://datatracker.ietf.org/doc/rfc3174/). + + + + + + + + + + + 1 + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 2 + + + + + + + + + device + The Element refers to a chipset, processor, or electronic board. + + + + + endOfSupport + there is a defined end of support for the artifact from the supplier. This may also be referred to as end of life. There is a validUntilDate that can be used to signal when support ends for the artifact. + + + + + noAssertion + no assertion about the type of support is made. This is considered the default if no other support type is used. + + + Identifies who or what supplied the artifact or VulnAssessmentRelationship +referenced by the Element. + + + + + + + A key with an associated value. + + + + + + + + + + + + + + + + mavenCentral + A reference to a Maven repository artifact. The artifact locator format is defined in the [Maven documentation](https://maven.apache.org/guides/mini/guide-naming-conventions.html) and looks like `groupId:artifactId[:version]`. + + + + + + + + + + + + + + + + + + + + + + Provide context for a relationship that occurs in the lifecycle. + + + + + + + + issueTracker + A reference to the issue tracker for a package. + + + + + + + + + Portion of an AnyLicenseInfo representing a License which has additional +text applied to it. + + + + + + + + + + + + + + + + + + file + The Element is a single file which can be independently distributed (configuration file, statically linked binary, Kubernetes deployment, etc.). + + + + + securityOther + A reference to related security information of unspecified type. + + + + + graph + data is in the form of a graph where entries are somehow related to each other through edges, such a social network of friends. + + + A short description of an Element. + + + + + + + + 1 + 1 + + + + + + 1 + + + + + development + the artifact is in active development and is not considered ready for formal support from the supplier. + + + + + hasRequirement + The `from` Element has a requirement on each `to` Element, during a LifecycleScopeType period. + + + + + + 1 + 1 + + + + + hasDataFile + The `from` Element treats each `to` Element as a data file. A data file is an artifact that stores data required or optional for the `from` Element's functionality. A data file can be a database file, an index file, a log file, an AI model file, a calibration data file, a temporary file, a backup file, and more. For AI training dataset, test dataset, test artifact, configuration data, build input data, and build output data, please consider using the more specific relationship types: `trainedOn`, `testedOn`, `hasTest`, `configures`, `hasInput`, and `hasOutput`, respectively. This relationship does not imply dependency. + + + + + + + 1 + 1 + + + + + + + + + crystalsDilithium + [Dilithium](https://pq-crystals.org/dilithium/) + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + Abstract class representing a License or an OrLaterOperator. + + + + + + + + + + + mailingList + A reference to the mailing list used by the maintainer for a package. + + + + + + 1 + 1 + + + + + Describes a certain part of a file. + + + + + + + + + + hasDocumentation + The `from` Element is documented by each `to` Element. + + + + + + + + + + md2 + MD2 message-digest algorithm, as defined in [RFC 1319](https://datatracker.ietf.org/doc/rfc1319/). + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + Specifies whether the License is listed as free by the +Free Software Foundation (FSF). + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + Specifies the version of a VEX statement. + + + + + + + binaryArtifact + A reference to binary artifacts related to a package. + + + + A license that is not listed on the SPDX License List. + + + + + + + + 1 + + + + + + + + + + + + Identifies from where or whom the Element originally came. + + + + + + + sourceArtifact + A reference to an artifact containing the sources for a package. + + + + + query + the dataset is publicly available, but not all at once, and can only be accessed through queries which return parts of the dataset. + + + + + firmware + The Element provides low level control over a device's hardware. + + + + + hasExample + Every `to` Element is an example for the `from` Element (`from` hasExample `to`). + + + + + + + + + + 1 + + + + + + 1 + 1 + + + Identifies the tooling that was used during the creation of the Element. + + + + + + + A reference to a resource identifier defined outside the scope of SPDX-3.0 content that uniquely identifies an Element. + + + + + + + + + + + buildSystem + A reference build system used to create or publish the package. + + + + + + + 1 + + + + + + + + + + + A License participating in a 'with addition' model. + + + + + + + + 1 + 1 + + + + + + + + + + + + + Specifies an AI package and its associated information. + + + + + + + + + + + + + + + + + + + + + + Specifies a vulnerability and its associated information. + + + + + + + + + + deviceDriver + The Element represents software that controls hardware devices. + + + + + sha3_384 + SHA-3 with a digest length of 384, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + A value used in a CdxPropertyEntry name-value pair. + + + + + + + + + Describes one a profile which the creator of this ElementCollection intends to +conform to. + + + + + + + + 1 + 1 + + + Specifies the value of the content identifier. + + + + + + + + 1 + + + + + securityThreatModel + A reference the [security threat model](https://en.wikipedia.org/wiki/Threat_model) for a package. + + + Provides information about the type of an SBOM. + + + + + + + A map of Element identifiers that are used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + componentAnalysisReport + A reference to a Software Composition Analysis (SCA) report. + + + + + underInvestigationFor + The `from` Vulnerability impact is being investigated for each `to` Element. The use of the `underInvestigationFor` type is constrained to `VexUnderInvestigationVulnAssessmentRelationship` classed relationships. + + + + + swhid + SoftWare Hash IDentifier, a persistent intrinsic identifier for digital artifacts, such as files, trees (also known as directories or folders), commits, and other objects typically found in version control systems. The format of the identifiers is defined in the [SWHID specification](https://www.swhid.org/specification/v1.1/4.Syntax) (ISO/IEC DIS 18670). They typically look like `swh:1:cnt:94a9ed024d3859793618152ea559a168bbcbb5e2`. + + + + Enumeration of the valid profiles. + + + + + + + + + registration + the dataset is not publicly available and an email registration is required before accessing the dataset, although without an affirmative acceptance of terms. + + + + + cpe23 + [Common Platform Enumeration: Naming Specification Version 2.3](https://csrc.nist.gov/publications/detail/nistir/7695/final) + + + + + + + + + directDownload + the dataset is publicly available and can be downloaded directly. + + + + + extension + the element follows the Extension profile specification + + + + + + + + + altDownloadLocation + A reference to an alternative download location. + + + + + hasDeletedFile + Every `to` Element is a file deleted from the `from` Element (`from` hasDeletedFile `to`). + + + + + An assertion made in relation to one or more elements. + + + + + + + + + + Specifies the safety risk level. + + + + + blake3 + [BLAKE3](https://github.com/BLAKE3-team/BLAKE3-specs/blob/master/blake3.pdf) + + + The percentile of the current probability score. + + + + + Provides an indication of where to retrieve an external Element. + + + + + + + + + + + + + 1 + 1 + + + Identifies when the Element was originally created. + + + + + + + Portion of an AnyLicenseInfo representing a set of licensing information +where all elements apply. + + + + + + + + + 2 + + + + + + + + + complete + The relationship is known to be exhaustive. + + + + + hasAssociatedVulnerability + Used to associate a `from` Artifact with each `to` Vulnerability. + + + + + + 1 + + + Describes if any sensitive personal information is present in the dataset. + + + + + + + archive + The Element is an archived collection of one or more files (.tar, .zip, etc.). + + + + + cpe22 + [Common Platform Enumeration Specification 2.2](https://cpe.mitre.org/files/cpe-specification_2.2.pdf) + + + + + build + SBOM generated as part of the process of building the software to create a releasable artifact (e.g., executable or package) from data such as source files, dependencies, built components, build process ephemeral data, and other SBOMs. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + + + + testedOn + The `from` Element has been tested on the `to` Element(s). + + + + + + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + medium + The third-highest level of risk posed by an AI system. + + + The result of applying a hash algorithm to an Element. + + + + + + + + + + + md4 + MD4 message-digest algorithm, as defined in [RFC 1186](https://datatracker.ietf.org/doc/rfc1186/). + + + Provides a NamespaceMap of prefixes and associated namespace partial URIs applicable to an SpdxDocument and independent of any specific serialization format or instance. + + + + + + + + 1 + 1 + + + + + + 1 + 1 + + + + + + + + + + + + + + model + The Element is a machine learning or artificial intelligence model. + + + + + Provides an EPSS assessment for a vulnerability. + + + + + + + + + Provides information about the creation of the Element. + + + + + + + + + + + Provides an SSVC assessment for a vulnerability. + + + + + + + + + + + + + + + + expandedLicensing + the element follows the expanded Licensing profile specification + + + Property describes the invocation entrypoint of a build. + + + + + + + scrapingScript + the dataset provider is not making available the underlying data and the dataset must be reassembled, typically using the provided script for scraping the data. + + + + + ai + the element follows the AI profile specification + + + Provides a place for the SPDX data creator to record acknowledgement text for +a software Package, File or Snippet. + + + + + + + hasAddedFile + Every `to` Element is a file added to the `from` Element (`from` hasAddedFile `to`). + + + + + publishedBy + Designates a `from` Vulnerability was made available for public use or reference by each `to` Agent. + + + + + + + + Availability of dataset. + + + + + + + + + + + + + + + Identifies all the text and metadata associated with a license in the license +XML format. + + + + + + + + + + + amber + Data points in the dataset can be shared only with specific organizations and their clients on a need to know basis. + + + + + + 1 + 1 + + + + + + + + + + + Provide the enumeration of possible decisions in the +[Stakeholder-Specific Vulnerability Categorization (SSVC) decision tree](https://www.cisa.gov/stakeholder-specific-vulnerability-categorization-ssvc). + + + + + + + hasTest + Every `to` Element is a test artifact for the `from` Element (`from` hasTest `to`), during a LifecycleScopeType period. + + + + + + + + + vulnerableCodeNotInExecutePath + The affected code is not reachable through the execution of the code, including non-anticipated states of the product. + + + + + + + + + + 1 + 1 + + + Explains why a VEX product is not affected by a vulnerability. It is an +alternative in VexNotAffectedVulnAssessmentRelationship to the machine-readable +justification label. + + + + + + + hasProvidedDependency + The `from` Element has a dependency on each `to` Element, dependency is not in the distributed artifact, but assumed to be provided, during a LifecycleScopeType period. + + + + + + + 1 + + + + + + + Records the measurement of prediction quality of the AI model. + + + + + Specifies the time when a vulnerability was published. + + + + + + + + 1 + + + This property is used to denote the root Element(s) of a tree of elements contained in a BOM. + + + + + + Provide an enumerated set of lifecycle phases that can provide context to relationships. + + + + + A characterization of some aspect of an Element that is associated with the Element in a generalized fashion. + + + + + + hasSpecification + Every `to` Element is a specification for the `from` Element (`from` hasSpecification `to`), during a LifecycleScopeType period. + + + + + + 1 + + + + + + + + Describes a mechanism to update the dataset. + + + + + + + + Abstract ancestor class for all VEX relationships + + + + + + + + + + + + A License participating in an 'or later' model. + + + + + + + + + + + + 1 + 1 + + + + + application + The Element is a software application. + + + + + review + Used when someone reviews the Element. + + + + + + + + + hasConcludedLicense + The `from` SoftwareArtifact is concluded by the SPDX data creator to be governed by each `to` license. + + + + + adler32 + Adler-32 checksum is part of the widely used zlib compression library as defined in [RFC 1950](https://datatracker.ietf.org/doc/rfc1950/) Section 2.3. + + + + + + + + + file + The file represents a single file (default). + + + + + noAssertion + No assertion can be made about the completeness of the relationship. + + + A buildType is a hint that is used to indicate the toolchain, platform, or +infrastructure that the build was invoked on. + + + + + + + + 1 + 1 + + + + + + + + + + 1 + + + + + + + + + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + A license addition that is not listed on the SPDX Exceptions List. + + + + + + + + + + + library + The Element is a software library. + + + + + + + + + + + + + sha3_224 + SHA-3 with a digest length of 224, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + security + the element follows the Security profile specification + + + + + hasEvidence + Every `to` Element is considered as evidence for the `from` Element (`from` hasEvidence `to`). + + + + + + 1 + + + + + vulnerabilityExploitabilityAssessment + A reference to a Vulnerability Exploitability eXchange (VEX) statement which provides information on whether a product is impacted by a specific vulnerability in an included package and, if affected, whether there are actions recommended to remediate. See also [NTIA VEX one-page summary](https://ntia.gov/files/ntia/publications/vex_one-page_summary.pdf). + + + + + + + + + + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + Provides an ExternalMap of Element identifiers. + + + + + Specifies the exploit catalog type. + + + + + + + + + + + high + The second-highest level of risk posed by an AI system. + + + + + data + The Element is data. + + + + + + + + + support + the artifact has been released, and is supported from the supplier. There is a validUntilDate that can provide additional information about the duration of support. + + + + + + + A buildId is a locally unique identifier used by a builder to identify a unique +instance of a build produced by it. + + + + + + + releaseHistory + A reference to a published list of releases for a package. + + + + + hasOutput + The `from` Build element generates each `to` Element as an output, during a LifecycleScopeType period. + + + + Specifies the exploit catalog type. + + + + + + + + + Provides information about the primary purpose of an Element. + + + + + + + + + + + + + + fixedIn + A `from` Vulnerability has been fixed in each `to` Element. The use of the `fixedIn` type is constrained to `VexFixedVulnAssessmentRelationship` classed relationships. + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + A canonical, unique, immutable identifier of the artifact content, that may be +used for verifying its identity and/or integrity. + + + + + + + amendedBy + The `from` Element is amended by each `to` Element. + + + + + + + + + Class that describes a build instance of software/artifacts. + + + + + + + + + + + + + + + + + + + A mathematical algorithm that maps data of arbitrary size to a bit string. + + + Specifies the level of support associated with an artifact. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + 1 + + + + + + + + + + + + + other + Every `to` Element is related to the `from` Element where the relationship type is not described by any of the SPDX relationship types (this relationship is directionless). + + + + + + + + + runtime + A relationship has specific context implications during the execution phase of an element. + + + + + gitoid + [Gitoid](https://www.iana.org/assignments/uri-schemes/prov/gitoid), stands for [Git Object ID](https://git-scm.com/book/en/v2/Git-Internals-Git-Objects). A gitoid of type blob is a unique hash of a binary artifact. A gitoid may represent either an [Artifact Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-identifier-types) for the software artifact or an [Input Manifest Identifier](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#input-manifest-identifier) for the software artifact's associated [Artifact Input Manifest](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-input-manifest); this ambiguity exists because the Artifact Input Manifest is itself an artifact, and the gitoid of that artifact is its valid identifier. Gitoids calculated on software artifacts (Snippet, File, or Package Elements) should be recorded in the SPDX 3.0 SoftwareArtifact's contentIdentifier property. Gitoids calculated on the Artifact Input Manifest (Input Manifest Identifier) should be recorded in the SPDX 3.0 Element's externalIdentifier property. See [OmniBOR Specification](https://github.com/omnibor/spec/), a minimalistic specification for describing software [Artifact Dependency Graphs](https://github.com/omnibor/spec/blob/eb1ee5c961c16215eb8709b2975d193a2007a35d/spec/SPEC.md#artifact-dependency-graph-adg). + + + + + affects + The `from` Vulnerability affects each `to` Element. The use of the `affects` type is constrained to `VexAffectedVulnAssessmentRelationship` classed relationships. + + + + + module + The Element is a module of a piece of software. + + + + + core + the element follows the Core profile specification + + + + + dependsOn + The `from` Element depends on each `to` Element, during a LifecycleScopeType period. + + + + + + + + + foundBy + Designates a `from` Vulnerability was originally discovered by the `to` Agent(s). + + + + + + + 1 + + + + + + 1 + + + + + A canonical, unique, immutable identifier + + + + + + + + + + + + + A collection of SPDX Elements describing a single package. + + + + + + + + + 1 + + + + + + + + + + + + + executable + The Element is an Artifact that can be run on a computer. + + + Records the results of general safety risk assessment of the AI system. + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + clickthrough + the dataset is not publicly available and can only be accessed after affirmatively accepting terms on a clickthrough webpage. + + + + + other + Other exploit catalogs + + + + + + + + + + 1 + 1 + + + + + cwe + [Common Weakness Enumeration](https://csrc.nist.gov/glossary/term/common_weakness_enumeration). A reference to a source of software flaw defined within the official [CWE List](https://cwe.mitre.org/data/) that conforms to the [CWE specification](https://cwe.mitre.org/). + + + + + noAssertion + Makes no assertion about the field. + + + + + vulnerableCodeNotPresent + The product is not affected because the code underlying the vulnerability is not present in the product. + + + + + + + + + categorical + data that is classified into a discrete number of categories, such as the eye color of a population of people. + + + Specifies whether an additional text identifier has been marked as deprecated. + + + + + + + inlineMitigationsAlreadyExist + Built-in inline controls or mitigations prevent an adversary from leveraging the vulnerability. + + + + + + 1 + + + A license expression participating in a license set. + + + + + Records any relevant background information or additional comments +about the origin of the package. + + + + + + + deployed + SBOM provides an inventory of software that is present on a system. This may be an assembly of other SBOMs that combines analysis of configuration options, and examination of execution behavior in a (potentially simulated) deployment environment. + + + + + trainedOn + The `from` Element has been trained on the `to` Element(s). + + + + + + + + + + + + + + + + + + + + + A container for a grouping of SPDX-3.0 content characterizing details +(provenence, composition, licensing, etc.) about a product. + + + + + + + + + + + + + Describes all the preprocessing steps applied to the training data before the +model training. + + + + + + + urlScheme + [Uniform Resource Identifier (URI) Schemes](https://www.iana.org/assignments/uri-schemes/uri-schemes.xhtml). The scheme used in order to locate a resource. + + + + + System Package Data Exchange (SPDX) Ontology + This ontology defines the terms and relationships used in the SPDX specification to describe system packages + 2024-04-05 + SPDX Project + + + System Package Data Exchange (SPDX) Ontology + Copyright (C) 2024 SPDX Project + + + + + + + 1 + 1 + + + + + documentation + The Element is documentation. + + + + + simpleLicensing + the element follows the simple Licensing profile specification + + + + + track + The vulnerability does not require action at this time. The organization would continue to track the vulnerability and reassess it if new information becomes available. CISA recommends remediating Track vulnerabilities within standard update timelines. + + + + + A tuple of two positive integers that define a range. + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + hasOptionalComponent + Every `to` Element is an optional component of the `from` Element (`from` hasOptionalComponent `to`). + + + Provides an unambiguous mechanism for conveying a URI fragment portion of an +Element ID. + + + + + + + + + Provides a place for the SPDX data creator to record the package URL string +(in accordance with the Package URL specification) for a software Package. + + + + + + + metrics + A reference to metrics related to package such as OpenSSF scorecards. + + + + + + + + + directory + The file represents a directory and all content stored in that directory. + + + Specifies until when the artifact can be used before its usage needs to be +reassessed. + + + + + + + + 1 + 1 + + + + + + + Property that describes the time at which a build stops. + + + + + + + source + SBOM created directly from the development environment, source files, and included dependencies used to build an product artifact. + + + + + + + + + + + Describe that a CVE is known to have an exploit because it's been listed in an exploit catalog. + + + + + + + + 1 + + + Provides the location of an exploit catalog. + + + + + + + + + Identifies the download Uniform Resource Identifier for the package at the time +that the document was created. + + + + + + + + + + An element of hardware and/or software utilized to carry out a particular function. + + + + + + + + + Uniquely identifies an external element. + + + + + + + + + + + + + + + staticAnalysisReport + A reference to a static analysis report for a package. + + + Describes if a given file is a directory or non-directory kind of file. + + + + + + + + + References the Element on the left-hand side of a relationship. + + + + + Property describing the session in which a build is invoked. + + + + + Records the biases that the dataset is known to encompass. + + + + + + + + + 1 + + + + + + + + + + + + + Links a vulnerability and one or more elements designating the latter as products +not affected by the vulnerability. + + + + + + + + + + + + + + build + A relationship has specific context implications during an element's build phase, during development. + + + + + + + + + eolNotice + A reference to the End Of Sale (EOS) and/or End Of Life (EOL) information related to a package. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + 1 + + + + ^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-((?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*)(?:\.(?:0|[1-9]\d*|\d*[a-zA-Z-][0-9a-zA-Z-]*))*))?(?:\+([0-9a-zA-Z-]+(?:\.[0-9a-zA-Z-]+)*))?$ + + + 1 + + + + + + + + Specifies the time an artifact was released. + + + + + Property describing a parameter used in an instance of a build. + + + + + + + + + + + hasOptionalDependency + The `from` Element optionally depends on each `to` Element, during a LifecycleScopeType period. + + + + Specifies the VEX justification type. + + + Provides a reference number that can be used to understand how to parse and +interpret an Element. + + + + + + + + 1 + + + + ^[^\/]+\/[^\/]+$ + + + 1 + + + + + + + + Provides a set of values to be used to describe the common types of SBOMs that +tools may create. + + + + + + + The relative file name of a file to be excluded from the +`PackageVerificationCode`. + + + + + + + qualityAssessmentReport + A reference to a quality assessment for a package. + + + + + npm + A reference to an npm package. The package locator format is defined in the [npm documentation](https://docs.npmjs.com/cli/v10/configuring-npm/package-json) and looks like `package@version`. + + + + + An Individual Value for License when no assertion can be made about its actual +value. + + + + + + + + + + + + + + Agent represents anything with the potential to act on a system. + + + + + References an Element on the right-hand side of a relationship. + + + + + + + serious + The highest level of risk posed by an AI system. + + + + + + 1 + + + + + + + + + configuration + The Element is configuration data. + + + + + + + + + vulnerableCodeCannotBeControlledByAdversary + The vulnerable component is present, and the component contains the vulnerable code. However, vulnerable code is used in such a way that an attacker cannot mount any anticipated attack. + + + + + + 1 + + + + + low + When a CVSS score is between 0.1 - 3.9 + + + + + + + + + + 1 + 1 + + + + + releaseNotes + A reference to the release notes for a package. + + + + + A license or addition that is not listed on the SPDX License List. + + + + + + + + analyzed + SBOM generated through analysis of artifacts (e.g., executables, packages, containers, and virtual machine images) after its build. Such analysis generally requires a variety of heuristics. In some contexts, this may also be referred to as a "3rd party" SBOM. + + + + + video + data is video based, such as a collection of movie clips featuring Tom Hanks. + + + + + build + the element follows the Build profile specification + + + + + + + + + other + The Element doesn't fit into any of the other categories. + + + + + packagedBy + Every `to` Element is a packaged instance of the `from` Element (`from` packagedBy `to`). + + + + + + + + + + + + + + 1 + 1 + + + + + act + The vulnerability requires attention from the organization's internal, supervisory-level and leadership-level individuals. Necessary actions include requesting assistance or information about the vulnerability, as well as publishing a notification either internally and/or externally. Typically, internal groups would meet to determine the overall response and then execute agreed upon actions. CISA recommends remediating Act vulnerabilities as soon as possible. + + + + + manifest + The Element is a software manifest. + + + + + An Individual Value for Element representing a set of Elements with +cardinality (number/count) of zero. + + + + + hasDependencyManifest + The `from` Element has manifest files that contain dependency information in each `to` Element. + + + + + packageUrl + Package URL, as defined in the corresponding [Annex](../../../annexes/pkg-url-specification.md) of this specification. + + + + + clear + Dataset may be distributed freely, without restriction. + + + + + + + + + design + A relationship has specific context implications during an element's design. + + + + + + + + + + + + + + + + + + 1 + 1 + + + + + + 1 + + + + + + + + + + + + + + + Specifies the CVSS vector string for a vulnerability. + + + + + + + secureSoftwareAttestation + A reference to information assuring that the software is developed using security practices as defined by [NIST SP 800-218 Secure Software Development Framework (SSDF) Version 1.1](https://csrc.nist.gov/pubs/sp/800/218/final) or [CISA Secure Software Development Attestation Form](https://www.cisa.gov/resources-tools/resources/secure-software-development-attestation-form). + + + + + cve + Common Vulnerabilities and Exposures identifiers, an identifier for a specific software flaw defined within the official CVE Dictionary and that conforms to the [CVE specification](https://csrc.nist.gov/glossary/term/cve_id). + + + + + + + + + altWebPage + A reference to an alternative web page. + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + 1 + + + An entity that is authorized to issue identification credentials. + + + + + + + hasInput + The `from` Build has each `to` Element as an input, during a LifecycleScopeType period. + + + + Specifies the type of a content identifier. + + + Contains a URL where the License or LicenseAddition can be found in use. + + + + + + + + + + + riskAssessment + A reference to a risk assessment for a package. + + + + + + + + + Categories of confidentiality level. + + + + + + + + + + + + + swid + Concise Software Identification (CoSWID) tag, as defined in [RFC 9393](https://datatracker.ietf.org/doc/rfc9393/) Section 2.3. + + + + + + + + + + + + + md6 + [MD6 hash function](https://people.csail.mit.edu/rivest/pubs/RABCx08.pdf) + + + + + + + + Defines the beginning of a range. + + + + + + + patchedBy + Every `to` Element is a patch for the `from` Element (`from` patchedBy `to`). + + + + + + + + + + + + + + + + + + purchaseOrder + A reference to a purchase order for a package. + + + + + + + Specifies the type of the external identifier. + + + + + + + other + Any other units of energy measurement. + + + + + + 1 + + + + + An Individual Value for Element representing a set of Elements of unknown +identify or cardinality (number). + + + + + + + + + + 1 + + + + + + + + Describes the preprocessing steps that were applied to the raw data to create the given dataset. + + + + + Provides a reference to a resource outside the scope of SPDX-3.0 content +that uniquely identifies an Element. + + + + + + + + + + + + + Timestamp of impact statement. + + + + + Conveys information about how VEX status was determined. + + + + + + + + + Specifies the algorithm used for calculating the hash value. + + + + + An Element an annotator has made an assertion about. + + + + + + + test + A relationship has specific context implications during an element's testing phase, during development. + + + + + install + The Element is used to install software on disk. + + + + + describes + The `from` Element describes each `to` Element. To denote the root(s) of a tree of elements in a collection, the rootElement property should be used. + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + + + + + + + + + + + + + + + + + + + 1 + + + + + green + Dataset can be shared within a community of peers and partners. + + + + + lite + the element follows the Lite profile specification + + + + + chat + A reference to the instant messaging system used by the maintainer for a package. + + + + + + 1 + + + + + sha384 + SHA-2 with a digest length of 384, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + hasTestCase + Every `to` Element is a test case for the `from` Element (`from` hasTestCase `to`). + + + The version of the SPDX License List used in the license expression. + + + + + + + + + + + + + + Provides a numerical (0-10) representation of the severity of a vulnerability. + + + + + Specifies the time from which an element is applicable / valid. + + + + + A substitute for a URI. + + + + + Captures a limitation of the AI software. + + + + + The name of a relevant standard that may apply to an artifact. + + + + + + + + + + + + + + + + + + + + + Provides a map of a property names to a values. + + + + + + + hasHost + The `from` Build was run on the `to` Element during a LifecycleScopeType period (e.g. the host that the build runs on). + + + + + + + + + framework + The Element is a software framework. + + + + + dataset + the element follows the Dataset profile specification + + + + + + + + + + + Commentary on an assertion that an annotator has made. + + + + + + + yes + Indicates presence of the field. + + + + + + + + + + + + + + + + + sha512 + SHA-2 with a digest length of 512, as defined in [RFC 6234](https://datatracker.ietf.org/doc/rfc6234/). + + + + + + 1 + + + + + numeric + data consists only of numeric entries. + + + Identifies the full text of a LicenseAddition. + + + + + + + + 1 + + + + + timeseries + data is recorded in an ordered sequence of timestamped entries, such as the price of a stock over the course of a day. + + + + + + + + + + + + + + + + + design + SBOM of intended, planned software project or product with included components (some of which may not yet exist) for a new software artifact. + + + + + + + + + + + Provides a License author's preferred text to indicate that a file is covered +by the License. + + + + + + + + 1 + + + + A software agent. + + + + + + + copiedTo + The `from` Element has been copied to each `to` Element. + + + + + + 1 + + + Provides relevant information about the AI software, not including the model +description. + + + + + + + hasAssessmentFor + Relates a `from` Vulnerability and each `to` Element with a security assessment. To be used with `VulnAssessmentRelationship` types. + + + + + + + + + trackStar + ("Track\*" in the SSVC spec) The vulnerability contains specific characteristics that may require closer monitoring for changes. CISA recommends remediating Track\* vulnerabilities within standard update timelines. + + + + + + 1 + + + + + + + + + operatingSystem + The Element is an operating system. + + + + + + + 1 + + + + + + + + + + + + + + + + Records the time when a recommended action was communicated in a VEX statement +to mitigate a vulnerability. + + + + + Defines the line range in the original host file that the snippet information +applies to. + + + + + + + + + + + + + + + + + + Provides an independently reproducible mechanism that permits verification of a specific Element. + + + + + + + + + Records if sensitive personal information is used during model training or +could be used during the inference. + + + + + + + + + + + noSupport + there is no support for the artifact from the supplier, consumer assumes any support obligations. + + + + + other + Used when the type does not match any of the other options. + + + + + + + A probability score between 0 and 1 of a vulnerability being exploited. + + + + + + + + + + + configures + The `from` Element is a configuration applied to each `to` Element, during a LifecycleScopeType period. + + + + + + + Describes the type of annotation. + + + + + + + container + The Element is a container image which can be used by a container runtime application. + + + + + + + + + + + Information about the relationship between two Elements. + + + + + + + + 1 + 1 + + + Specifies an Element contained in a piece of software where a vulnerability was +found. + + + + + Provides an IntegrityMethod with which the integrity of an Element can be +asserted. + + + + + + + + + Property that describes the URI of the build configuration source file. + + + + + + + kilowattHour + Kilowatt-hour. + + + + + + + + + patch + The Element contains a set of changes to update, fix, or improve another Element. + + + + + + + + + filesystemImage + The Element is a file system image that can be written to a disk (or virtual) partition. + + + + + + + + ^\d\d\d\d-\d\d-\d\dT\d\d:\d\d:\d\dZ$ + + + 1 + + + + + + + + + + 1 + 1 + + + The field describes the availability of a dataset. + + + + + Identifies who or what created the Element. + + + + + + + deployed + in addition to being supported by the supplier, the software is known to have been deployed and is in use. For a software as a service provider, this implies the software is now available as a service. + + + + Categories of presence or absence. + + + + + + 1 + + + + + + + + + + + Property that describes the digest of the build configuration file used to +invoke a build. + + + + + + + red + Data points in the dataset are highly confidential and can only be shared with named recipients. + + + Describes the anonymization methods used. + + + + + + + + + + + + + + + + + + + kev + CISA's Known Exploited Vulnerability (KEV) Catalog + + + + + + + Specifies the type of the content identifier. + + + + + Identifies the full text of a LicenseAddition, in SPDX templating format. + + + + + + Specifies the unit of energy consumption. + + + + + + + + + structured + data is stored in tabular format or retrieved from a relational database. + + + + + other + data is of a type not included in this list. + + + + + + + Provide consumers with comments by the creator of the Element about the +Element. + + + + + + + + + + + crystalsKyber + [Kyber](https://pq-crystals.org/kyber/) + + + + + bom + The Element is a bill of materials. + + + + + source + The Element is a single or a collection of source files. + + + + + + 1 + + + + + + + + + + + + + low + Low/no risk is posed by an AI system. + + + + + dynamicAnalysisReport + A reference to a dynamic analysis report for a package. + + + + + + + + Enumeration of the different kinds of SPDX file. + + + Maps a LicenseRef or AdditionRef string for a Custom License or a Custom +License Addition to its URI ID. + + + + + + Specifies the type of an annotation. + + + + + + + Refers to one or more Elements that are part of an ElementCollection. + + + + + + + invokedBy + The `from` Element was invoked by the `to` Agent, during a LifecycleScopeType period (for example, a Build element that describes a build step). + + + + + + + + + + + + + + sha3_256 + SHA-3 with a digest length of 256, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + + + + + + + + + Specifies the unit in which energy is measured. + + + + + Describes potentially noisy elements of the dataset. + + + + + + + + 1 + 1 + + + + + + 1 + + + Provides information about the completeness of relationships. + + + + + + + + + + Specifies the amount of energy consumed when finetuning the AI model that is +being used in the AI system. + + + + + + + + + + + sha3_512 + SHA-3 with a digest length of 512, as defined in [FIPS 202](https://csrc.nist.gov/pubs/fips/202/final). + + + + + + + Identifies the text of one or more copyright notices for a software Package, +File or Snippet, if any. + + + + + + + + + + + + no + Indicates absence of the field. + + + + + ancestorOf + The `from` Element is an ancestor of each `to` Element. + + + + + text + data consists of unstructured text, such as a book, Wikipedia article (without images), or transcript. + + + + + + 1 + + + + + + 1 + + + + + + + + + + + + + + 1 + + + + + + + 1 + 1 + + + + + + + + + + + + + development + A relationship has specific context implications during development phase of an element. + + + + + + + + + + + + Identifies an external Element used within an SpdxDocument but defined +external to that SpdxDocument. + + + + + + + + + + + + + + + runtime + SBOM generated through instrumenting the system running the software, to capture only components present in the system, as well as external call-outs or dynamically loaded components. In some contexts, this may also be referred to as an "Instrumented" or "Dynamic" SBOM. + + + + + An Individual Value for License where the SPDX data creator determines that no +license is present. + + + + + + + 1 + + + + + + + + + availableFrom + The `from` Element is available from the additional supplier described by each `to` Element. + + + + + + + Provides information about the creation of the Element. + + + + + + + + 1 + + + + + + + Defines the end of a range. + + + + + + + megajoule + Megajoule. + + + + + + + Describes a sensor used for collecting the data. + + + + + + + + + + + + 1 + + + + + + 1 + + + Specifies the SPDX License List version in which this license or exception +identifier was deprecated. + + + + + + Specifies the type of an external identifier. + + + + + + + + + + + + Specifies the amount of energy consumed when training the AI model that is +being used in the AI system. + + + + + + + + + + + + + + + + + + + + + 1 + + + Property describing the start time of a build. + + + + + + + + 1 + 1 + + + + + + + 1 + + + + + + + + + + + + Indicates the type of support that is associated with an artifact. + + + Captures the domain in which the AI package can be used. + + + + + + + + + + + + + + + + + Specifies the type of the external reference. + + + + + + + + + + + + + + + + + + Identifies the name of an Element as designated by the creator. + + + + + + + + + + + + + + + An Organization representing the SPDX Project. + + + + + + + + Captures the threshold that was used for computation of a metric described in +the metric field. + + + + + A LicenseAddition participating in a 'with addition' model. + + + + + Specifies the CVSS qualitative severity rating of a vulnerability in relation to a piece of software. + + + + + + + sha224 + SHA-2 with a digest length of 224, as defined in [RFC 3874](https://datatracker.ietf.org/doc/rfc3874/). + + + + + + + + + + + + Designates elements as products where the impact of a vulnerability is being +investigated. + + + + + + + + + + + + + + Links a vulnerability and elements representing products (in the VEX sense) where +a fix has been applied and are no longer affected. + + + + + + + + + + + + + + + + + + + + + + + + + Describes what the given dataset should be used for. + + + + + + + + + Describes relevant information about different steps of the training process. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + Gives information about the circumstances or unifying properties +that Elements of the bundle have been assembled under. + + + + + Artifact representing a serialization instance of SPDX data containing the +definition of a particular Element. + + + + + A place for the SPDX document creator to record a website that serves as the +package's home page. + + + + + + + + + + + + + + Indicates whether a relationship is known to be complete, incomplete, or if no assertion is made with respect to relationship completeness. + + + Provides the location of an external reference. + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +